A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
2023-07-05T15:15:09.277
2024-11-21T08:09:05.070
Modified
CVSSv3.1: 8.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.6.0.21 | Yes |
| Operating System | arubanetworks | arubaos | < 8.10.0.7 | Yes |
| Operating System | arubanetworks | arubaos | < 8.11.1.1 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.0.2 | Yes |
| Application | arubanetworks | mc-va-10 | - | No |
| Application | arubanetworks | mc-va-1k | - | No |
| Application | arubanetworks | mc-va-250 | - | No |
| Application | arubanetworks | mc-va-50 | - | No |
| Application | arubanetworks | mcr-va-10k | - | No |
| Application | arubanetworks | mcr-va-1k | - | No |
| Application | arubanetworks | mcr-va-50 | - | No |
| Application | arubanetworks | mcr-va-500 | - | No |
| Application | arubanetworks | mcr-va-5k | - | No |
| Application | arubanetworks | sd-wan | - | No |
| Hardware | arubanetworks | mcr-hw-10k | - | No |
| Hardware | arubanetworks | mcr-hw-1k | - | No |
| Hardware | arubanetworks | mcr-hw-5k | - | No |