CVE Feed

    Dashboard / CVE / CVE-2023-31928

    CVE-2023-31928

    A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.

    Published:Aug 1, 2023
    Last Modified:Feb 13, 2025
    EPS:Aug 1, 2023
    EPSS Score:0.00121
    CVSS Score:6.3

    Affected Products

    Vendor
    Broadcom
    Product
    Brocade Fabric Operating System

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-31926 (CVSS 7.1) — System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c…
    CVE-2023-31927 (CVSS 5.3) — An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 a…
    CVE-2023-31432 (CVSS 7.8) — Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, lice…
    CVE-2023-31428 (CVSS 5.5) — Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that c…
    CVE-2023-31430 (CVSS 5.5) — A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.…
    CVE-2023-31431 (CVSS 5.5) — A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and …
    CVE-2021-23133 (CVSS 6.7) — A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
    CVE-2020-12243 (CVSS 7.5) — In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result…
    CVE-2020-1927 (CVSS 6.1) — In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-ref…
    CVE-2020-35507 (CVSS 5.5) — There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High