CVE-2007-4023

2007-07-2619:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

79.0%

JSON

Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

osvdb.org/36469

secunia.com/advisories/26192

www.arubanetworks.com/support/alerts/aid-070907b.asc

www.kb.cert.org/vuls/id/680449

www.securityfocus.com/bid/25059

www.securitytracker.com/id?1018457

www.vupen.com/english/advisories/2007/2646

exchange.xforce.ibmcloud.com/vulnerabilities/35605