CVE-2023-5648
Missing Security Headers Enable Unauthenticated XSS and Clickjacking on Brocade ASCG
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.
CVSS 4.0 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products