Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-6225

Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information.

Published

2018-02-08T22:29:00.207

Last Modified

2024-11-21T03:29:18.123

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	broadcom	fabric_operating_system	< 7.4.2b	Yes
Operating System	broadcom	fabric_operating_system	8.0.2	Yes
Operating System	broadcom	fabric_operating_system	8.1.1	Yes
Operating System	brocade	fabric_os	8.0.1b1	Yes
Operating System	brocade	fabric_os	8.0.2b1	Yes
Operating System	brocade	fabric_os	8.1.0c1	Yes

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us ([email protected])
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525 ([email protected])
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us (af854a3a-2127-422b-91ae-364da2661108)
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525 (af854a3a-2127-422b-91ae-364da2661108)