CVE-2022-28163: Broadcom Sannav

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands.

Affected products

• Broadcom Sannav: before 2.2.0 (fixed in 2.2.0)

Published 2022-05-06. Last modified 2026-06-17.