Broadcom Brocade SANnav

Name: Broadcom Brocade SANnav
Brand: Broadcom

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical23high50medium2low

updated 2026-10-28

vulnerabilities (102)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-23017US	high7.7	53.5% (99th)	Exploit	v2.2.0.2	2021-06-01	2 versions
CVE-2024-23653US	critical9.8OT high	3.45% (89th)	Exploit	2.3.1a	2024-01-31	< 2.3.1a
CVE-2024-23652US	critical9.1	2.46% (84th)	Exploit	2.3.1a	2024-01-31	< 2.3.1a
CVE-2023-34478US	critical9.8	2.07% (81st)	Exploit	2.3.1	2023-07-24	3 versions
CVE-2023-52160US	medium6.5	1.18% (67th)	Exploit	2.3.0a	2024-02-22	< 2.3.0a
CVE-2022-32215US	medium6.5	70.2% (99th)	—	2.3.1a	2022-07-14	2 versions
CVE-2021-35559US	medium5.0	15.9% (97th)	—	2.2.1	2021-10-20	< 2.2.1
CVE-2021-29921US	critical9.8	6.88% (94th)	—	v2.2.0.2	2021-05-06	< v2.2.0.2
CVE-2023-45648US	medium5.3	5.88% (93rd)	—	2.3.1	2023-10-10	2 versions
CVE-2021-3522US	medium5.5	5.37% (93rd)	—	2.2.1	2021-06-02	< 2.2.1
CVE-2024-1597US	critical9.8	4.81% (92nd)	—	2.4.0a	2024-02-19	< 2.4.0a
CVE-2021-27290US	high7.5	4.72% (92nd)	—	2.2.1	2021-03-12	< 2.2.1
CVE-2024-10979US	high8.8	4.39% (91st)	—	2.4.0a	2024-11-14	< 2.4.0a
CVE-2021-2341US	medium4.3	4.24% (91st)	—	v2.2.0.2	2021-07-21	< v2.2.0.2
CVE-2021-2388US	medium5.1	4.01% (90th)	—	v2.2.0.2	2021-07-21	< v2.2.0.2
CVE-2022-21283US	medium5.0	3.78% (90th)	—	2.3.0a	2022-01-19	3 versions
CVE-2021-2432US	medium4.3	3.70% (90th)	—	v2.2.0.2	2021-07-21	< v2.2.0.2
CVE-2021-2369US	medium4.3	3.44% (89th)	—	v2.2.0.2	2021-07-21	< v2.2.0.2
CVE-2022-21366US	medium5.0	3.22% (88th)	—	2.3.0a	2022-01-19	3 versions
CVE-2022-21277US	medium5.0	3.09% (88th)	—	v2.2.0.2	2022-01-19	3 versions
CVE-2023-42795US	medium5.3	2.51% (85th)	—	2.3.1	2023-10-10	2 versions
CVE-2023-42794US	medium5.9	2.30% (83rd)	—	2.3.0a	2023-10-10	2 versions
CVE-2023-39410US	high7.5	2.22% (83rd)	—	2.3.0a	2023-09-29	2 versions
CVE-2022-2191US	high7.5	2.18% (82nd)	—	2.3.1a	2022-07-07	< 2.3.1a
CVE-2022-2906US	high7.5	2.07% (81st)	—	2.4.0	2022-09-21	2 versions
CVE-2022-3080US	high7.5	2.02% (81st)	—	2.4.0	2022-09-21	2 versions
CVE-2022-21634US	—	1.75% (78th)	—	2.3.1a	2022-10-18	2 versions
CVE-2023-5072US	high7.5	1.74% (78th)	—	2.3.1a	2023-10-12	2 versions
CVE-2023-39417US	high8.8	1.68% (77th)	—	2.3.1	2023-08-11	3 versions
CVE-2022-2881US	high8.2	1.42% (73rd)	—	2.4.0	2022-09-21	2 versions
CVE-2024-23650US	medium5.3	1.14% (66th)	—	2.3.1a	2024-01-31	< 2.3.1a
CVE-2023-39418US	medium4.3OT elevated	1.09% (65th)	—	2.3.1a	2023-08-11	3 versions
CVE-2023-0394US	medium5.5OT elevated	1.02% (63rd)	—	2.3.0	2023-01-26	< 2.3.0
CVE-2022-21597US	—	0.93% (61st)	—	2.3.1a	2022-10-18	2 versions
CVE-2024-23651US	high7.4	0.91% (60th)	—	2.3.1a	2024-01-31	< 2.3.1a
CVE-2023-31424US	critical9.8	0.90% (59th)	—	2.3.0a	2023-08-31	4 versions
CVE-2024-21003US	—	0.86% (58th)	—	2.4.0	2024-04-16	2 versions
CVE-2024-21005US	—	0.85% (58th)	—	2.4.0	2024-04-16	2 versions
CVE-2024-2859US	high7.2OT elevated	0.85% (58th)	—	2.3.0	2024-04-27	3 versions
CVE-2024-26924US	—	0.85% (58th)	—	no fix	2024-04-25	2 versions
CVE-2024-10976US	medium5.4	0.77% (55th)	—	2.4.0a	2024-11-14	< 2.4.0a
CVE-2024-29961US	high8.2	0.76% (55th)	—	2.3.0a	2024-04-19	3 versions
CVE-2024-10978US	medium4.2	0.69% (53rd)	—	2.4.0a	2024-11-14	< 2.4.0a
CVE-2020-28928US	medium5.5	0.65% (51st)	—	v2.2.0.2	2020-11-24	< v2.2.0.2
CVE-2024-29966US	critical9.8OT elevated	0.65% (51st)	—	2.3.0a	2024-04-19	3 versions
CVE-2024-32487US	—	0.63% (50th)	—	2.3.1b	2024-04-13	< 2.3.1b
CVE-2026-82370US	—	0.60% (49th)	—	3.0.1a	2026-09-24	< 3.0.1a
CVE-2024-21098US	—	0.57% (47th)	—	2.3.1b	2024-04-16	2 versions
CVE-2022-41946US	medium5.5	0.54% (45th)	—	2.3.0a	2022-11-23	2 versions
CVE-2024-20954US	—	0.53% (44th)	—	2.3.1b	2024-04-16	2 versions

showing 50 of 102

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation15 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor10 CVEs
CWE-532Insertion of Sensitive Information into Log File10 CVEs
CWE-312Cleartext Storage of Sensitive Information9 CVEs
CWE-264CWE-2645 CVEs
CWE-276Incorrect Default Permissions5 CVEs
CWE-285Improper Authorization5 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)101 CVEs
EUEU Vulnerability Database (ENISA)3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan