CVE-2019-5320

2020-08-2622:30:55

hpe

www.cve.org

aruba intelligent edge switch

cross site scripting

web ui

code injection

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

33.8%

JSON

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Cross Site Scripting in the web UI, leading to injection of code.

CNA Affected

[
  {
    "product": "Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003"
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt