Broadcom DX NetOps Spectrum DOM-Based Cross-Site Scripting Vulnerability

A DOM-based cross-site scripting vulnerability has been identified in Broadcom DX NetOps Spectrum versions through 24.3.9 on Windows and Linux. This issue arises from the product's reliance on outdated third-party JavaScript libraries, specifically Bootstrap and DOMPurify, which contained known vulnerabilities that could be exploited to perform cross-site scripting attacks.

Impact

Exploitation of this vulnerability allows for DOM-based cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can upgrade to Broadcom DX NetOps Spectrum version 25.4.1 or later to address this vulnerability. Instructions for upgrading can be found on the Broadcom Support website.