Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-5649 1 Broadcom 1 Brocade Active Support Connectivity Gateway 2026-10-14 5.5 Medium
An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service (DoS) when collecting “supportsave” from a Brocade Switch.
CVE-2023-5648 2 Broadcom, Brocade 2 Brocade Active Support Connectivity Gateway, Active Support Connectivity Gateway 2026-10-14 6.1 Medium
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.