Skip to content
Sign in
Not rated

CVE-2019-5314 Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS

Description

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Aruba Mobility Controllers Versions not published

Other CVEs of Aruba Mobility Controllers

The 3 CVEs of Aruba Mobility Controllers →
CVE-2019-5315 A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated… Not rated CVE-2018-7081 A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS Not rated
Track this CVE