{"id":"CVE-2018-6443","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-6443","generatedAt":"2026-10-28T21:19:39.836Z","title":"A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE…","description":"A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console.","published":"2019-01-22T17:29:00.000Z","lastModified":"2026-06-17T02:01:51.000Z","status":"Modified","sourceIdentifier":"sirt@brocade.com","cvss":{"version":"3.0","score":8.1,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-255"],"affected":["brocade/network advisor","netapp/brocade network advisor"],"epss":{"score":0.07395,"percentile":0.94397,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.05866,"percentile":0.92925},{"date":"2026-09-22","score":0.07395,"percentile":0.94151}]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2019-05-21","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":46887,"kind":"exploit","title":"Brocade Network Advisor 14.4.1 - Unauthenticated Remote Code Execution","url":"https://www.exploit-db.com/exploits/46887","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/webapps/46887.txt","file":"exploits/java/webapps/46887.txt","published":"2019-05-21","added":"2019-05-21","updated":"2019-05-21","author":"Jakub Palaczynski","type":"webapps","platform":"java","port":null,"verified":true,"codes":["CVE-2018-6443"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 7.4%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/153035/Brocade-Network-Advisor-14.4.1-Unauthenticated-Remote-Code-Execution.html","source":"sirt@brocade.com"},{"url":"https://security.netapp.com/advisory/ntap-20190411-0005/","tags":["Third Party Advisory"],"source":"sirt@brocade.com"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-743","tags":["Third Party Advisory"],"source":"sirt@brocade.com"},{"url":"http://packetstormsecurity.com/files/153035/Brocade-Network-Advisor-14.4.1-Unauthenticated-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190411-0005/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-743","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-6443","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}