by Kastro
Paper/Archive/CVE-2022-28163

CVE-2022-28163

brocade — In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allow…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.8.608 × 2012.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands.

Affected

ProductAffectedFixed inSource
Brocade SANNavBrocade SANNav before 2.2.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refbroadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1842