CVE-2023-22778

A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Score

CVSS 3.1 4.8 Medium

Status

Modified - security-alert@hpe.com

Published

2023-03-01

Last modified

2025-03-07

Weaknesses

CWE-79

Affected products

• Arubaos (Arubanetworks)
• Sd-wan (Arubanetworks)
• Aruba Mobility Conductor Formerly Mobility Master Aruba Mobility Controllers Wlan Gateways And Sd-wan Gateways Managed By Aruba Central (Hewlett Packard Enterprise Hpe)

References

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt