CVE Catalog
CVE-2023-4324
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.59%
43th percentile - higher than 43% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking HTTP Content-Security-Policy headers.
Risk Assessment
The absence of proper security headers may lead to cross-site scripting (XSS) attacks, jeopardizing data integrity and system security.
Recommendation
It is recommended to configure HTTP Content-Security-Policy headers in the RAID controller web interface to enhance application security.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers