Search vulnerabilities

Results 1

Export CSV
CVE-2023-5648

Missing Security Headers Enable Unauthenticated XSS and Clickjacking on Brocade ASCG

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.

CVSS 4.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors