CVE-2007-4023: XSS
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4023?
CVE-2007-4023 is classified as a high severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2007-4023?
To fix CVE-2007-4023, update the Aruba Mobility Controller to a version that addresses this vulnerability, specifically versions later than 2.5.4.18 and 2.4.8.6-FIPS.
What software is affected by CVE-2007-4023?
CVE-2007-4023 affects Aruba Mobility Controller versions 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions.
What type of vulnerability is CVE-2007-4023?
CVE-2007-4023 is a Cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
Who can exploit CVE-2007-4023?
CVE-2007-4023 can be exploited by remote attackers who can send requests to the vulnerable login CGI program.