Brocade records
21 published records for vendor brocade.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-20 Improper Input Validation3
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
The weakness classes this vendor ships most often: where to look.
CWEAll records
21 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2016-8205No exploit | A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 1brocade · network advisor · CWE-22 | Critical9.8 | — | 13.0% | Jan 14, 2017 |
40Plan | CVE-2018-6444No exploit | A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code.brocade · network advisor · CWE-78 | Critical9.8 | — | 3.2% | Jan 22, 2019 |
37Monitor | CVE-2014-4868No exploit | The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrarybrocade · vyatta 5400 vrouter software · CWE-78 | Critical9.0 | — | 2.7% | Oct 7, 2014 |
35Monitor | CVE-2016-8207No exploit | A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.brocade · network advisor · CWE-22 | High7.5 | — | 15.3% | Jan 14, 2017 |
34Monitor | CVE-2016-8206No exploit | A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 1brocade · network advisor · CWE-22 | High7.5 | — | 14.5% | Jan 14, 2017 |
34Monitor | CVE-2018-6443Proof of concept | A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Admbrocade · network advisor · CWE-255 | High8.1 | — | 7.3% | Jan 22, 2019 |
32Monitor | CVE-2007-2764No exploit | The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a non-root linux · linux kernel · CWE-20 | High7.8 | — | 2.4% | May 18, 2007 |
32Monitor | CVE-2016-8201No exploit | A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logbrocade · virtual traffic manager · CWE-352 | High8.0 | — | 0.4% | Jan 14, 2017 |
31Monitor | CVE-2016-8203No exploit | A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, anbrocade · netiron os · CWE-119 | High7.5 | — | 1.8% | Oct 31, 2016 |
31Monitor | CVE-2018-6445No exploit | A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user dbrocade · network advisor | High7.5 | — | 1.6% | Jan 22, 2019 |
30Monitor | CVE-2016-8209No exploit | Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Mabrocade · netiron mlx series firmware · CWE-754 | High7.5 | — | 1.0% | May 8, 2017 |
28Monitor | CVE-2014-4870No exploit | /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validbrocade · vyatta 5400 vrouter software · CWE-20 | High7.2 | — | 0.3% | Oct 7, 2014 |
27Monitor | CVE-2025-7397No exploit | CLI history displays inline passwordsbrocade · ascg · CWE-312 | Medium6.8 | — | 0.1% | Jul 17, 2025 |
26Monitor | CVE-2017-6227No exploit | A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.brocade · fabric os | Medium6.5 | — | 0.5% | Feb 8, 2018 |
24Monitor | CVE-2017-6225No exploit | Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric brocade · fabric os · CWE-79 | Medium6.1 | — | 1.4% | Feb 8, 2018 |
22Monitor | CVE-2022-28161No exploit | An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, brocade · sannav · CWE-532 | Medium5.5 | — | 0.2% | May 9, 2022 |
21Monitor | CVE-2004-1663No exploit | Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWormbrocade · silkworm | Medium5.0 | — | 4.0% | Sep 4, 2004 |
21Monitor | CVE-2013-7307No exploit | The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State Ibrocade · vyatta vrouter software | Medium5.4 | — | 0.9% | Jan 23, 2014 |
21Monitor | CVE-2013-7306No exploit | The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (brocade · adx · CWE-20 | Medium5.4 | — | 0.7% | Jan 23, 2014 |
20Monitor | CVE-2011-2760No exploit | Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet.brocade · bigiron rx switch · CWE-264 | Medium5.0 | — | 1.5% | Jul 17, 2011 |
20Monitor | CVE-2014-4869No exploit | The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraginbrocade · vyatta 5400 vrouter software · CWE-264 | Medium5.0 | — | 1.1% | Oct 7, 2014 |
- CVE-2016-820543Plan
A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 1
CriticalCVSS 9.8No exploitEPSS 13%brocade · network advisorJan 14, 2017
- CVE-2018-644440Plan
A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code.
CriticalCVSS 9.8No exploitEPSS 3%brocade · network advisorJan 22, 2019
- CVE-2014-486837Monitor
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary
CriticalCVSS 9.0No exploitEPSS 2%brocade · vyatta 5400 vrouter softwareOct 7, 2014
- CVE-2016-820735Monitor
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.
HighCVSS 7.5No exploitEPSS 15%brocade · network advisorJan 14, 2017
- CVE-2016-820634Monitor
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 1
HighCVSS 7.5No exploitEPSS 14%brocade · network advisorJan 14, 2017
- CVE-2018-644334Monitor
A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Adm
HighCVSS 8.1Proof of conceptEPSS 7%brocade · network advisorJan 22, 2019
- CVE-2007-276432Monitor
The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a non-root
HighCVSS 7.8No exploitEPSS 2%linux · linux kernelMay 18, 2007
- CVE-2016-820132Monitor
A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a log
HighCVSS 8.0No exploitEPSS 0%brocade · virtual traffic managerJan 14, 2017
- CVE-2016-820331Monitor
A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, an
HighCVSS 7.5No exploitEPSS 1%brocade · netiron osOct 31, 2016
- CVE-2018-644531Monitor
A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user d
HighCVSS 7.5No exploitEPSS 1%brocade · network advisorJan 22, 2019
- CVE-2016-820930Monitor
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Ma
HighCVSS 7.5No exploitEPSS 1%brocade · netiron mlx series firmwareMay 8, 2017
- CVE-2014-487028Monitor
/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly valid
HighCVSS 7.2No exploitEPSS 0%brocade · vyatta 5400 vrouter softwareOct 7, 2014
- CVE-2025-739727Monitor
CLI history displays inline passwords
MediumCVSS 6.8No exploitEPSS 0%brocade · ascgJul 17, 2025
- CVE-2017-622726Monitor
A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.
MediumCVSS 6.5No exploitEPSS 0%brocade · fabric osFeb 8, 2018
- CVE-2017-622524Monitor
Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric
MediumCVSS 6.1No exploitEPSS 1%brocade · fabric osFeb 8, 2018
- CVE-2022-2816122Monitor
An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated,
MediumCVSS 5.5No exploitEPSS 0%brocade · sannavMay 9, 2022
- CVE-2004-166321Monitor
Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm
MediumCVSS 5.0No exploitEPSS 4%brocade · silkwormSep 4, 2004
- CVE-2013-730721Monitor
The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State I
MediumCVSS 5.4No exploitEPSS 0%brocade · vyatta vrouter softwareJan 23, 2014
- CVE-2013-730621Monitor
The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (
MediumCVSS 5.4No exploitEPSS 0%brocade · adxJan 23, 2014
- CVE-2011-276020Monitor
Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet.
MediumCVSS 5.0No exploitEPSS 1%brocade · bigiron rx switchJul 17, 2011
- CVE-2014-486920Monitor
The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveragin
MediumCVSS 5.0No exploitEPSS 1%brocade · vyatta 5400 vrouter softwareOct 7, 2014