Description
A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Fabric OS | before Brocade Fabric OS v9.2.0 | — |
Advisories 2
- WID-SEC-2023-1937 Broadcom Brocade Switch: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2024
- WID-SEC-2023-1969 HPE Fabric OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Aug 6, 2023