CVE-2023-5648

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.

Score

CVSS 4.0 6.5 Medium

Status

Analyzed - sirt@brocade.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-79

Affected products

• Brocade Active Support Connectivity Gateway (Broadcom)
• Active Support Connectivity Gateway (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/22715