A number of TLS vulnerabilities are listed by Wikipedia, including attacks with brand names such as FREAK, DROWN, CRIME, BREACH, and POODLE. My lay reading of their description makes me think these vulnerabilities are reliant on an attacker being able to either 1) influence a victim's browser's behaviour, or 2) occupy a man-in-the-middle position on the network and actively manipulate traffic.
Are there any TLS vulnerabilities which can be exploited using only passive observation of traffic, and which are practical enough to be a concern for ordinary systems administrators?
By "practical" I mean not reliant on a theoretical mathematical breakthrough, or on excessive compute resources or time (say, no more than $100,000 worth of commodity x86 server could do if working on its hypothetical decryption algorithm for a year).
By "ordinary systems administrators" I mean someone working at a Fortune 500 corporation wanting to protect innocuous customer data, not a nation state agency protecting ultra-secret launch codes.