# Broadcom Brocade Sannav


- [CVE-2022-23305](https://insights.sbomify.com/CVE-2022-23305/): SQL injection in JDBC Appender in Apache Log4j V1 (critical 9.8)
- [CVE-2019-16211](https://insights.sbomify.com/CVE-2019-16211/): Hardcoded credentials in Brocade SANnav (critical 9.8)
- [CVE-2024-3596](https://insights.sbomify.com/CVE-2024-3596/): RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. (critical 9.0)
- [CVE-2022-23302](https://insights.sbomify.com/CVE-2022-23302/): Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (high 8.8)
- [CVE-2019-16212](https://insights.sbomify.com/CVE-2019-16212/): A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. (high 8.8)
- [CVE-2019-16205](https://insights.sbomify.com/CVE-2019-16205/): Weak cryptography in Brocade SANnav (high 8.8)
- [CVE-2024-2240](https://insights.sbomify.com/CVE-2024-2240/): Docker implementation in Brocade SANnav is missing Audit Rules. (high 8.6)
- [CVE-2025-1053](https://insights.sbomify.com/CVE-2025-1053/): Brocade SANnav encryption key is logged in the debug logs (high 8.6)
- [CVE-2024-4161](https://insights.sbomify.com/CVE-2024-4161/): Syslog traffic sent in clear-text (high 8.6)
- [CVE-2024-29959](https://insights.sbomify.com/CVE-2024-29959/): Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save (high 8.6)
- [CVE-2026-5047](https://insights.sbomify.com/CVE-2026-5047/): Information disclosure in Brocade SANnav (high 8.2)
- [CVE-2024-4282](https://insights.sbomify.com/CVE-2024-4282/): Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/broadcom/brocade-sannav/