CVE-2018-6447

5.4 mediumEPSS 0.5%

Medium (5.4) in broadcom fabric operating system. EPSS 0.5% chance of exploitation in the next 30 days.

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:fabric_operating_system

References

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073

Check your stack JSON