Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-31	CVE-2023-31424	Unspecified vulnerability in Broadcom Brocade Sannav Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authorization. network low complexity broadcom critical	9.8
2022-01-18	CVE-2022-23305	SQL Injection vulnerability in multiple products By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. network low complexity apache netapp broadcom qos oracle CWE-89 critical	9.8
2020-09-25	CVE-2019-16211	Insufficiently Protected Credentials vulnerability in Broadcom Brocade Sannav 1.1.0/1.1.1/2.0 Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability. network low complexity broadcom CWE-522 critical	9.8