Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated a…Check if you run itEPSS 0.31%Oct 8, 2026
- High7.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…Check if you run itEPSS 0.39%Oct 8, 2026
- High7.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…Check if you run itEPSS 0.39%Oct 8, 2026
- High7.5IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.Check if you run itEPSS 0.39%Oct 8, 2026
- Medium4.9IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request…Check if you run itEPSS 0.14%Oct 8, 2026
- High7.1In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the O…Check if you run itEPSS 0.20%Oct 8, 2026
- High8.4In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management crede…Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.3An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details…Check if you run itEPSS 0.15%Oct 8, 2026
- High7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.10%Oct 8, 2026
- High8.6A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments…Check if you run itEPSS 0.19%Oct 8, 2026
- High7.7When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences…Check if you run itEPSS 0.31%Oct 8, 2026
- High8.7An authentication flaw exists in the Brocade ASCG administrative management service component.Check if you run itEPSS 0.21%Oct 8, 2026
- High7.0Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.Check if you run itEPSS 0.09%Oct 8, 2026
- High8.6A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.24%Oct 8, 2026
- High8.6Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.Check if you run itEPSS 0.29%Oct 8, 2026
- High8.6A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.24%Oct 8, 2026
- High8.4A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensit…Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.6A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosti…Check if you run itEPSS 0.07%Oct 8, 2026
- Medium6.9A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a.Check if you run itEPSS 0.19%Oct 8, 2026
- Medium6.1In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to injec…Check if you run itEPSS 0.23%Oct 8, 2026
- High8.2A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files.Check if you run itEPSS 0.20%Oct 8, 2026
- High8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.22%Oct 8, 2026
- Medium6.9A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versio…Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS vers…Check if you run itEPSS 1.44%Oct 8, 2026
- High7.7An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.Check if you run itEPSS 0.19%Oct 8, 2026
Sort