CVE-2023-31928

2023-08-0200:15:17

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-31928

brocade

fabric os

xss

vulnerability

webtools

portsetting.html

nvd

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

29.9%

JSON

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.

Affected configurations

NVD

Node

broadcombrocade_fabric_operating_systemRange<9.2.0

CPENameOperatorVersion
broadcom:brocade_fabric_operating_systembroadcom brocade fabric operating systemlt9.2.0

CPE	Name	Operator	Version
broadcom:brocade_fabric_operating_system	broadcom brocade fabric operating system	lt	9.2.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Fabric OS",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": " before Brocade Fabric OS v9.2.0"
      }
    ]
  }
]