Information Disclosure

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain th…CVE-2007-5439Broadcom · 2.3% likely

   CWE-200

2. On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offl…CVE-2017-11122Broadcom · 1.8% likely

   CWE-200

3. Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a user password in cleartext. The vulnerability is due to incorre…CVE-2020-15370Broadcom · 1.0% likely

   CWE-532

4. Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.CVE-2020-15380Broadcom · 1.0% likely

   CWE-532

5. In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to ac…CVE-2022-28168Broadcom · 0.9% likely

   CWE-922

6. Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those…CVE-2022-31684Broadcom · CVSS 4.3 · 0.8% likely

   CWE-532

7. Spectrum session token in URLCVE-2025-69270Broadcom · CVSS 2.3 · 0.3% likely

   CWE-598

8. JSON Web Token (JWT) Exposure in Log FilesCVE-2025-6391Broadcom · CVSS 7.1 · 0.3% likely

   CWE-532

9. A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.CVE-2025-24506Broadcom · CVSS 5.3 · 0.3% likely

   CWE-203

10. Symantec Privileged Access Manager Insecure Direct Object Reference vulnerabilityCVE-2024-38496Broadcom · CVSS 5.1 · 0.3% likely

    CWE-922

11. An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to…CVE-2022-33181Broadcom · CVSS 5.5 · 0.2% likely

    CWE-200

12. Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a loca…CVE-2022-28170Broadcom · CVSS 6.5 · 0.2% likely

    CWE-922

13. Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)CVE-2025-6392Broadcom · CVSS 6.7 · 0.2% likely

    CWE-532

14. Cleartext storage of sensitive information in Brocade SANnav server audit logs.CVE-2025-6390Broadcom · CVSS 5.1 · 0.2% likely

    CWE-497

15. Plaintext security passwords are logged in the audit logs while executing openssl cmdCVE-2025-4662Broadcom · CVSS 5.1 · 0.2% likely

    CWE-497

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.