WID-SEC-W-2026-0240

DeutschShown in its original language — a full translation is planned for a future version.

Broadcom Brocade SANnav: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

view advisory published 2026-01-27

Ein Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen offenzulegen.

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-12774US	high7.5OT elevated	0.20% (10th)	—	2026-02-03
A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to…
CVE-2025-12773US	medium6.5	0.37% (31st)	—	2026-02-03
A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs.…
CVE-2025-12772US	medium4.9OT elevated	0.29% (22nd)	—	2026-02-02
Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs. When OOM occurs on a Brocade SANnav server, the call stack trace for…
CVE-2025-12680US	medium4.9OT elevated	0.25% (16th)	—	2026-02-02
Brocade SANnav before Brocade SANnav 2.4.0b logs database passwords in clear text in the standby SANnav server, after disaster recovery failover. The vulnerability could allow a r…
CVE-2025-12679US	medium6.5OT elevated	0.16% (5th)	—	2026-02-02
A vulnerability in Brocade SANnav before 2.4.0b prints the Password-Based Encryption (PBE) key in plaintext in the system audit log file. The vulnerability could allow a remote a…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.