Netapp Brocade Network Advisor vulnerabilities

3 CVEs affecting Netapp Brocade Network Advisor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6445, published 2019-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-6443, published 2019-01-22. High severity, CVSS 8.1. EPSS: 7.4% chance of exploitation in the next 30 days. A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an…
CVE-2018-6444, published 2019-01-22. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute…
CVE-2018-6445, published 2019-01-22. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password…