CVE-2023-35978 Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface

A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context...

CVE-2023-35978

CVE-2023-35978: A reflected XSS vulnerability in ArubaOS web-based management interface allows an unauthenticated, remote attacker to execute arbitrary script code in a victim’s browser. Affected: ArubaOS web UI components. Root cause: lack of proper input handling in the web interface leading to...

CVE-2023-35977 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35977 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35977

CVE-2023-35977 affects ArubaOS with an authenticated information-disclosure issue via the ArubaOS command line interface. The vulnerability allows an authenticated attacker to access data beyond their privilege level, affecting confidentiality (C) with a high impact, while integrity and availabil...

CVE-2023-35976 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35976

CVE-2023-35976 describes an authenticated sensitive information disclosure in ArubaOS by exploiting the command-line interface. Across provided documents, the vulnerability allows an authenticated attacker to access data beyond the user’s existing privilege level. The ArubaOS PSA and Nessus plugi...

CVE-2023-35976 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35975 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-35975 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-35975

CVE-2023-35975 describes an authenticated path traversal in ArubaOS CLI that allows deletion of arbitrary files in the underlying OS. Affected products are ArubaOS versions prior to fixed releases; Nessus ARUBA-PSA-2023-008 lists ArubaOS <8.6.0.21, <8.10.0.7, <8.11.1.1, and

CVE-2023-35974

CVE-2023-35974 affects ArubaOS: an authenticated command injection vulnerability in the ArubaOS command line interface that allows an attacker with network access and high privileges to run arbitrary commands as a privileged OS user. The CVSSv3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) yield...

CVE-2023-35974 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-35974 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-35973

CVE-2023-35973 affects ArubaOS CLI. Authenticated attackers can inject commands via the ArubaOS command line interface, executing arbitrary commands as a privileged user on the underlying OS. Exploitation is network-based with low complexity and does not require user interaction. Remediation per ...

CVE-2023-35973 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-35973 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-35972

CVE-2023-35972 affects ArubaOS web-based management interface on ArubaOS devices. It is an authenticated remote command injection vulnerability that allows a privileged user to execute arbitrary OS commands, potentially fully compromising the device. Root cause noted in related advisories points ...

CVE-2023-35972 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to full...

CVE-2023-35972 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to full...