Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-6447


A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.


Published

2020-09-25T14:15:13.110

Last Modified

2024-11-21T04:10:41.853

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System broadcom fabric_operating_system 2.1.2 Yes
Operating System broadcom fabric_operating_system 2.2 Yes
Operating System broadcom fabric_operating_system 3.1 Yes
Operating System broadcom fabric_operating_system 5.0.5b Yes
Operating System broadcom fabric_operating_system 5.2.0 Yes
Operating System broadcom fabric_operating_system 5.2.0a Yes
Operating System broadcom fabric_operating_system 7.4.0 Yes
Operating System broadcom fabric_operating_system 7.4.1 Yes
Operating System broadcom fabric_operating_system 7.4.1a Yes
Operating System broadcom fabric_operating_system 7.4.1b Yes
Operating System broadcom fabric_operating_system 7.4.1c Yes
Operating System broadcom fabric_operating_system 7.4.1d Yes
Operating System broadcom fabric_operating_system 7.4.1e Yes
Operating System broadcom fabric_operating_system 7.4.2 Yes
Operating System broadcom fabric_operating_system 7.4.2a Yes
Operating System broadcom fabric_operating_system 7.4.2b Yes
Operating System broadcom fabric_operating_system 7.4.2c Yes
Operating System broadcom fabric_operating_system 7.4.2d Yes
Operating System broadcom fabric_operating_system 7.4.2f Yes
Operating System broadcom fabric_operating_system 8.0.0 Yes
Operating System broadcom fabric_operating_system 8.0.1 Yes
Operating System broadcom fabric_operating_system 8.0.1a Yes
Operating System broadcom fabric_operating_system 8.0.1b Yes
Operating System broadcom fabric_operating_system 8.0.2 Yes
Operating System broadcom fabric_operating_system 8.0.2a Yes
Operating System broadcom fabric_operating_system 8.0.2b Yes
Operating System broadcom fabric_operating_system 8.0.2c Yes
Operating System broadcom fabric_operating_system 8.0.2d Yes
Operating System broadcom fabric_operating_system 8.0.2f Yes
Operating System broadcom fabric_operating_system 8.1.0 Yes
Operating System broadcom fabric_operating_system 8.1.0a Yes
Operating System broadcom fabric_operating_system 8.1.0b Yes
Operating System broadcom fabric_operating_system 8.1.0c Yes
Operating System broadcom fabric_operating_system 8.1.1 Yes
Operating System broadcom fabric_operating_system 8.1.1a Yes
Operating System broadcom fabric_operating_system 8.1.2 Yes
Operating System broadcom fabric_operating_system 8.1.2a Yes
Operating System broadcom fabric_operating_system 8.1.2b Yes
Operating System broadcom fabric_operating_system 8.1.2c Yes
Operating System broadcom fabric_operating_system 8.1.2d Yes
Operating System broadcom fabric_operating_system 8.1.2e Yes
Operating System broadcom fabric_operating_system 8.1.2f Yes
Operating System broadcom fabric_operating_system 8.1.2j Yes
Operating System broadcom fabric_operating_system 8.2.0 Yes
Operating System broadcom fabric_operating_system 8.2.0a Yes
Operating System broadcom fabric_operating_system 8.2.1 Yes
Operating System broadcom fabric_operating_system 8.2.1a Yes
Operating System broadcom fabric_operating_system 8.2.1b Yes
Operating System broadcom fabric_operating_system 8.2.1c Yes
Operating System broadcom fabric_operating_system 8.2.1d Yes
Operating System broadcom fabric_operating_system 8.2.2 Yes
Operating System broadcom fabric_operating_system 8.2.2a Yes
Operating System broadcom fabric_operating_system 8.2.2a1 Yes
Operating System broadcom fabric_operating_system 8.2.2b Yes
Operating System broadcom fabric_operating_system 8.2.3 Yes

References