Lucene search
HistoryJun 01, 2023 - 1:15 a.m.
CVE-2023-23954
cve-2023-23954
advanced secure gateway
content analysis
stored xss
vulnerability
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.7%
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability.
Affected configurations
Node
broadcomadvanced_secure_gatewayRange<7.3.13.1
ORbroadcomcontent_analysisRange<3.1.6.0
CNA Affected
[
{
"vendor": "n/a",
"product": "Advanced Secure Gateway, Content Analysis",
"versions": [
{
"version": "7.3.13.1, 3.1.6..0",
"status": "affected"
}
]
}
]Related
cvelist
cvelist
CVE-2023-23954
2023-06-01 00:00:00
prion
prion
Cross site scripting
2023-06-01 01:15:00
nvd
nvd
CVE-2023-23954
2023-06-01 01:15:17
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.7%
Related for CVE-2023-23954