CVE-2023-31928

Опубликовано: 02 авг. 2023

Источник: nvd

CVSS3: 6.3

CVSS3: 6.1

EPSS Низкий

Описание

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.

Ссылки

https://security.netapp.com/advisory/ntap-20230908-0007/
Third Party Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/22390
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230908-0007/
Third Party Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/22390
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:broadcom:brocade_fabric_operating_system:*:*:*:*:*:*:*:*

Версия до 9.2.0 (исключая)

EPSS

Процентиль: 32%

0.00121

Низкий

6.3 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-995r-hfcw-r5pv

CVSS3: 6.3

github

больше 2 лет назад

EPSS

Процентиль: 32%

0.00121

Низкий

6.3 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79