Brocade vulnerabilities1 known to be exploited.

Vendor1 known exploited
The short answer

Brocade has 30 published vulnerabilities across 56 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Fabric Operating System, with 10. If you run Brocade software, patch the exploited flaws first.

See the exploited flaws

The most recent Brocade flaw added to the known-exploited list is CVE-2021-22555, on 6 October 2025. We keep watching the known-exploited list.

Products

Which Brocade products have the most vulnerabilities?

Fabric Operating System leads with 10 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

Known exploited

Which Brocade vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2021-22555HighKnown exploited
    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

    Chance of use79%Known exploited since6 Oct 2025
Exploit likelihood

Which Brocade flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 79%
    CVE-2021-22555HighKnown exploited

    A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.

    CVSS7.8Published7 Jul 2021
  2. 15%

    A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with...

    CVSS7.5Published14 Jan 2017
  3. 15%

    A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and...

    CVSS7.5Published14 Jan 2017
  4. 13%

    A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section...

    CVSS9.8Published14 Jan 2017
  5. 7.4%

    A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user...

    CVSS8.1Published22 Jan 2019
  6. 4.2%

    Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and...

    CVSS5.0Published4 Sep 2004
  7. 4.1%

    A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

    CVSS6.5Published2 Jun 2022
  8. 3.3%

    An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

    CVSS7.5Published2 Jun 2022
  9. 3.3%

    A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code.

    CVSS9.8Published22 Jan 2019
  10. 2.7%

    The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.

    CVSS9.0Published7 Oct 2014
Precursor Intelligence

Running Brocade? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 30 published vulnerabilities across 56 products and 97 versions from Brocade. The most recent Brocade flaw added to the known-exploited list is CVE-2021-22555, on 6 October 2025.

1 Brocade vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2021-22555. The full list is on this page.

Fabric Operating System, with 10 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Brocade products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.