CVE-2023-0746 — XSS Vulnerability in GigaVue-FM

CVE-2023-0746

XSS Vulnerability in GigaVue-FM PUBLISHED

Description (CNA)

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.

Affected (CNA)

Vendor / product	Versions
Gigamon / GigaVUE-FM	affected GigaVUE-OS 5.0 202 5.0 202

CWE

CWE-79

References

https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm

ADP enrichment

CVE

No English description supplied.

https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm

CISA-ADP

No English description supplied.

No references supplied.