What’s Vulnerable › Vulnerabilities

CVE-2023-0746: XSS Vulnerability in GigaVue-FM

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-10 · updated 2026-06-17
• Weakness: CWE-79

Description

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.

Affected products

• Gigamon GigaVUE-FM: 5.0.202

References

• https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm
• https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm

Get alerted when CVE-2023-0746 or the next vulnerability affects your stack