Vendor
Brocade
151 known vulnerabilities.
Brocade at a glance
- Last 12 months
- 83
- Critical · all time
- 0
- Exploited · all time
- 1
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 61 | 0 |
| Sep 2026 | 9 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 12 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 1 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 1 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 8 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
151 results · Feed
-
High 8.4
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host netw…
-
Medium 5.3
An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions bef…
-
High 7.6
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supp…
-
High 8.6
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attac…
-
High 7.7
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the applic…
-
High 8.7
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated netwo…
-
High 7.0
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.…
-
High 8.6
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthent…
-
High 8.6
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenti…
-
High 8.6
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoi…
-
High 8.4
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardc…
-
High 8.7
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to…
-
Medium 5.6
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plainte…
-
Medium 6.9
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local …
-
Medium 6.1
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerabilit…
-
High 8.2
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log fi…
-
Medium 6.8
An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow …
-
Medium 6.5
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG UR…
-
High 7.7
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.…
-
Medium 6.9
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file…
-
Medium 5.4
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines duri…
-
Medium 5.9
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fa…
-
Medium 6.8
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data du…
-
Medium 5.4
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9…
-
High 8.5
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or fi…
-
High 8.5
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before …
-
High 7.3
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechani…
-
High 8.5
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10…
-
High 7.1
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Bro…
-
High 7.0
Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsa…
-
High 7.0
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of…
-
High 8.4
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS ve…
-
High 8.6
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions be…
-
High 7.3
An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions be…
-
High 8.5
A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2…
-
High 7.0
An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS vers…
-
High 8.5
An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throu…
-
High 8.4
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions …
-
High 8.5
An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS admi…
-
Low 2.1
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions befo…