A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
2023-07-05T15:15:09.790
2024-11-21T08:09:05.930
Modified
CVSSv3.1: 6.1 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.6.0.21 | Yes |
| Operating System | arubanetworks | arubaos | < 8.10.0.7 | Yes |
| Operating System | arubanetworks | arubaos | < 8.11.1.1 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.0.2 | Yes |
| Application | arubanetworks | mc-va-10 | - | No |
| Application | arubanetworks | mc-va-1k | - | No |
| Application | arubanetworks | mc-va-250 | - | No |
| Application | arubanetworks | mc-va-50 | - | No |
| Application | arubanetworks | mcr-va-10k | - | No |
| Application | arubanetworks | mcr-va-1k | - | No |
| Application | arubanetworks | mcr-va-50 | - | No |
| Application | arubanetworks | mcr-va-500 | - | No |
| Application | arubanetworks | mcr-va-5k | - | No |
| Application | arubanetworks | sd-wan | - | No |
| Hardware | arubanetworks | mcr-hw-10k | - | No |
| Hardware | arubanetworks | mcr-hw-1k | - | No |
| Hardware | arubanetworks | mcr-hw-5k | - | No |