Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-43525
HistoryJan 05, 2023 - 7:15 a.m.

CVE-2022-43525

2023-01-0507:15:11
CWE-79
[email protected]
web.nvd.nist.gov
3
aruba edgeconnect
cross-site scripting
remote attack

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

42.8%

JSON

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned.

Affected configurations

Nvd
Node
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange≤8.10.23.40015on-premises
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40110on-premises
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.4.40436on-premises
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.2.0–9.2.1.40179on-premises
Node
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange≤8.10.23.40015as-a-service
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40110as-a-service
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.4.40436as-a-service
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.2.0–9.2.1.40179as-a-service
Node
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange≤8.10.23.40015global_enterprise_tenant_orchestrators
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40110global_enterprise_tenant_orchestrators
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.4.40436global_enterprise_tenant_orchestrators
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.2.0–9.2.1.40179global_enterprise_tenant_orchestrators
Node
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange≤8.10.23.40015sp
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40110sp
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.4.40436sp
OR
arubanetworksaruba_edgeconnect_enterprise_orchestratorRange9.2.0–9.2.1.40179sp
VendorProductVersionCPE
arubanetworksaruba_edgeconnect_enterprise_orchestrator*cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:on-premises:*:*:*
arubanetworksaruba_edgeconnect_enterprise_orchestrator*cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:as-a-service:*:*:*
arubanetworksaruba_edgeconnect_enterprise_orchestrator*cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:global_enterprise_tenant_orchestrators:*:*:*
arubanetworksaruba_edgeconnect_enterprise_orchestrator*cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:sp:*:*:*

Related

cvelist 1
prion 1
cve 1
cvelist
cvelist
CVE-2022-43525
2023-01-03 19:28:02
prion
prion
Cross site scripting
2023-01-05 07:15:00
cve
cve
CVE-2022-43525
2023-01-05 07:15:11

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

42.8%

JSON
Related for NVD:CVE-2022-43525
cvelist1prion1cve1