CVE-2018-6447
Estado: ModificadaMedia (5.4)—
A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 5.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.51%
- Percentil entre todas las CVEs puntuadas: 42
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-6447",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 5.4,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.3
}
]
},
"affected": [
{
"source": "sirt@brocade.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Brocade Fabric OS",
"versions": [
{
"status": "affected",
"version": "Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g"
}
]
}
]
}
],
"published": "2020-09-25T14:15:13.110",
"references": [
{
"url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073",
"tags": [
"Vendor Advisory"
],
"source": "sirt@brocade.com"
},
{
"url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account."
},
{
"lang": "es",
"value": "Una vulnerabilidad de tipo XSS Reflexivo en la Interfaz de Administración HTTP en Brocade Fabric OS versiones anteriores a Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g, podría permitir a atacantes autenticados con acceso a la interfaz web secuestrar la sesión de un usuario y tomar el control de la cuenta"
}
],
"lastModified": "2026-06-17T02:01:50.977",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B419E9E-A92F-4773-B64D-F6A9D595666E"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09357B7C-2D5C-4C4C-A630-92E93A00F366"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48535F1A-DDEA-4225-9592-7890E3CB7F64"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:5.0.5b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "569C1E6A-AD15-460D-91B2-03ABDF79925A"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:5.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D149E5D3-33E7-4904-975B-6FEBC5D0D120"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:5.2.0a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A3BF2BB-6323-4EFA-A76B-6EAC79C5E784"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "847D6D8A-9DC1-4FA5-A204-BBC5A319DE91"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5D67948-5C26-4CA3-BD1E-025AFF96AD97"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E1ECDF7-A972-4AFB-B6DB-BE81DE44E6C7"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8237571-12FD-4871-9F30-3D0A9F956E4A"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "916020DF-D1BC-4051-8492-88B4836CD91A"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.1d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CA0FD46-871D-4E19-89D6-B6BB73C2C315"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.1e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C9EF300-4DBC-4ECA-8A49-9A2D0027E35C"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FEAE07D-906E-4B7C-B577-14D15CFFB69C"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A589310-66AB-4D4F-A332-64E245AB1D0B"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.2b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F633FD3F-8224-4D96-BD0C-55EA218D4364"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.2c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "656001D2-F17B-49C0-9F38-E84B5CE3E088"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.2d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9761DF12-141D-4109-805D-449B5495ACB3"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:7.4.2f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD207CDF-7BF9-4FBD-86C4-C24B66D219FF"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A234DD0C-6C62-4A5E-B093-14F54710C2F1"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA532CBE-FCAF-4AE7-9A39-808864223E41"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B31089DE-FCE6-4CE2-9175-DE852DA725BD"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C290579-59BF-4465-8D02-4A9154C3615D"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C9EBAFF-2358-4EEC-9E83-EBCAC8805414"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9367275-F4B3-4BC1-BE50-00A9AFA84B06"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CF2C554-5F8A-401F-8E0B-C686EE644CAD"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17139A37-3F57-4063-ADD4-FFF6813C0A27"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FC5B110-36D5-4311-A4C2-E23CFC46F527"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.0.2f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08E5445F-89A9-4C9E-8F46-19F1279ED363"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7727C720-11C5-48DA-B604-6D296B0A9521"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.0a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "924F8C74-0EEC-4D77-AD24-8EFCD0FDF8A9"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.0b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68A9B3C1-2C1D-4D7D-BCFB-ECD1D78A9BC5"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.0c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F2277EA-698F-4874-BDEF-609AACE35C81"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79418EEC-72C2-4A85-97CE-7B472E9AAF79"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C1E9751-0A3F-44EC-8BF1-0192519B21D5"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E064A2B0-8316-4192-A319-81778BE7923C"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFA12D62-012C-4379-8DBC-F6439AFA56B3"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B419A050-C6B3-44A3-8C53-7CAA4FDA26E0"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB143EE1-4E8A-4ED5-B890-195686BF8F57"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5159821-59B6-47BC-B888-BE122D022980"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BD8C47B-ADDA-4863-85C7-DEACBEF3824F"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E7E1958-4EE9-443D-B648-B937C4A29478"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.1.2j:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB7656E4-4F68-4B98-A682-13A1D13600EE"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB05F642-6396-4FBC-BF59-3C7D513FC022"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.0a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E46B701-EF2B-4EF3-AE28-E6DC700F5B8A"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C91FB6C-7BF5-453E-A618-06756D3DD2FB"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CF38E78-8243-4615-A8A1-1396920F5BA1"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84E4F075-D03B-4D98-8C9E-840D80DFFF48"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDDF78F1-A7F3-4656-AD5D-6D84F83B34F0"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.1d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAA3D3F6-C768-4096-A2CA-8CC406A92D6B"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B244FB24-0767-4DC4-9988-ED8C5D9D9A91"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DDA4E8C-F140-4E39-9A6F-7883F2822499"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.2a1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "441E912B-4DD8-4A04-8072-04CE30D5A436"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.2b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3B33CEA-BE17-411D-86FF-388B21E8F018"
},
{
"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:8.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B8758BE-527C-40EA-BFE6-848A1C87723F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "sirt@brocade.com"
}