CVE-2023-22778 Authenticated Stored Cross-Site Scripting

🗓️ 28 Feb 2023 17:05:56Reported by hpeType

Vulnerability in ArubaOS web management interface allows stored cross-site scripting attack, enabling arbitrary script code execution in victim's browse

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability in the web interface for operating systems ArubaOS allows a hacker to execute cross-site scripting attacks.	4 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-22778	1 Mar 202312:39	–	circl
CNNVD	Aruba Networks ArubaOS 跨站脚本漏洞	1 Mar 202300:00	–	cnnvd
CVE	CVE-2023-22778	28 Feb 202317:05	–	cve
EUVD	EUVD-2023-26896	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Aruba Networks OS	2 Mar 202300:00	–	ncsc
NVD	CVE-2023-22778	1 Mar 202308:15	–	nvd
OSV	CVE-2023-22778	1 Mar 202308:15	–	osv
Prion	Cross site scripting	1 Mar 202308:15	–	prion
Vulnrichment	CVE-2023-22778 Authenticated Stored Cross-Site Scripting	28 Feb 202317:05	–	vulnrichment

[
  {
    "defaultStatus": "affected",
    "product": "Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "ArubaOS 8.6.x.x:  8.6.0.19 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS 8.10.x.x:   8.10.0.4 and below"
      },
      {
        "status": "affected",
        "version": "ArubaOS 10.3.x.x:  10.3.1.0 and below"
      },
      {
        "status": "affected",
        "version": "SD-WAN 8.7.0.0-2.3.0.x:  8.7.0.0-2.3.0.8 and below"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt

01 Mar 2023 05:45Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.14.8

EPSS0.00473