CVE-2023-22778
01.03.2023, 08:15
A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | sd-wan | 8.7.0.0-2.3.0.0 ≤ 𝑥 ≤ 8.7.0.0-2.3.0.8 |
| arubanetworks | arubaos | 8.6.0.0 ≤ 𝑥 ≤ 8.6.0.19 |
| arubanetworks | arubaos | 8.10.0.0 ≤ 𝑥 ≤ 8.10.0.4 |
| arubanetworks | arubaos | 10.3.0.0 ≤ 𝑥 ≤ 10.3.1.0 |
𝑥
= Vulnerable software versions