high8.3
CVE-2023-39266
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) at…
Impact
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hpe | Arubaos-Switch | before a.15.16.0026 from 16.01.0000 before 16.04.0027 from 16.05.0000 before 16.08.0027 from 16.10.0001 before 16.10.0024 from 16.11.0001 before 16.11.0013 |