Netapp Brocade Fabric Operating System vulnerabilities

3 CVEs affecting Netapp Brocade Fabric Operating System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6119, published 2024-09-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6119, published 2024-09-03. High severity, CVSS 7.5. EPSS: 66.6% chance of exploitation in the next 30 days. Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the…
CVE-2024-2398, published 2024-03-27. High severity, CVSS 8.6. EPSS: 36.1% chance of exploitation in the next 30 days. When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push.…
CVE-2023-28531, published 2023-03-17. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.