Siemens SCALANCE W1750D Improper Neutralization of Input During Web Page Generation (CVE-2022-37896)

A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross- site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser...

CVE-2022-37896

creationtimestamp| type| source ---|---|--- 2022-10-07 22:17:32+00:00| seen| https://t.me/cibsecurity/51003...

CVE-2022-37896

CVE-2022-37896 describes a reflected XSS vulnerability in Aruba InstantOS/ArubaOS 10 web management interfaces. A remote attacker could exploit input handling in the affected web UI to trigger script execution in a victim’s browser within the Aruba InstantOS/ArubaOS context. Affected versions inc...