Lucene search

K
cvelistHpeCVELIST:CVE-2023-35978
HistoryJul 05, 2023 - 2:49 p.m.

CVE-2023-35978 Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface

2023-07-0514:49:00
hpe
www.cve.org
9
arubaos
cross-site scripting
xss
cve-2023-35978
web-based management interface
vulnerability
remote attacker
arbitrary script code

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7

Confidence

High

EPSS

0.001

Percentile

30.1%

A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "- ArubaOS 10.4.x.x:       10.4.0.1 and below"
      },
      {
        "status": "affected",
        "version": "- ArubaOS 8.11.x.x:       8.11.1.0 and below"
      },
      {
        "status": "affected",
        "version": "- ArubaOS 8.10.x.x:       8.10.0.6 and below"
      },
      {
        "status": "affected",
        "version": "- ArubaOS 8.6.x.x:         8.6.0.20 and below"
      }
    ]
  }
]

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7

Confidence

High

EPSS

0.001

Percentile

30.1%

Related for CVELIST:CVE-2023-35978