In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.1 · broadcomNVD modified 2026-10-14 19:20
Affected (CPE criteria) 1
cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*