CVE-2019-5320

Name of the Vulnerable Software and Affected Versions Aruba Intelligent Edge Switch Series 2540 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2540 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2540 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2530 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2530 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2530 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2930F versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2930F versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2930F versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2930M versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2930M versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2930M versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 2920 versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 2920 versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 2920 versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 5400R versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 5400R versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 5400R versions 16.10.* through 16.10.0002 Aruba Intelligent Edge Switch Series 3810M versions 16.08.* through 16.08.0008 Aruba Intelligent Edge Switch Series 3810M versions 16.09.* through 16.09.0006 Aruba Intelligent Edge Switch Series 3810M versions 16.10.* through 16.10.0002

Description The issue is related to Cross Site Scripting in the web UI, which can lead to the injection of code.

Recommendations For Aruba Intelligent Edge Switch Series 2540 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2540 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2540 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2530 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2930F version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2930M version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 2920 version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 5400R version 16.10., update to version 16.10.0003 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.08., update to version 16.08.0009 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.09., update to version 16.09.0007 or later. For Aruba Intelligent Edge Switch Series 3810M version 16.10.*, update to version 16.10.0003 or later.