Aller au contenu
Se connecter
8.3 Élevée

CVE-2023-39266 A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct…

Description

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Produits et versions touchés

Produit Versions touchées Corrigé en
ArubaOS-Switch Versions non publiées

Autres CVE de ArubaOS-Switch

Les 3 CVE de ArubaOS-Switch →
CVE-2023-39268 A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving… 4.5 Moyenne CVE-2023-39267 An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch 6.6 Moyenne
Suivre cette CVE