PT-2023-2094
CVE-2023-22778
·
Published
2023-02-28
·
Updated
2025-03-07
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
ArubaOS (affected versions not specified)
Description
The issue is related to insufficient protection of the web page structure in the ArubaOS web management interface. This could allow a remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could enable an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾