Skip to content
Sign in
8.3 High

CVE-2023-39266 A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct…

Description

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Affected products and versions

Product Affected versions Fixed in
ArubaOS-Switch Versions not published

Other CVEs of ArubaOS-Switch

The 3 CVEs of ArubaOS-Switch →
CVE-2023-39268 A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving… 4.5 Medium CVE-2023-39267 An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch 6.6 Medium
Track this CVE