CVE-2019-5314: XSS
First published: Fri Sep 13 2019(Updated: )
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arubanetworks Arubaos | <6.4.4.20 | |
| Arubanetworks Arubaos | >=6.5.4.0<6.5.4.11 | |
| Arubanetworks Arubaos | >=6.5.4.12<8.2.1.0 | |
| Arubanetworks Arubaos | >=8.2.1.1<8.3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/arubanetworks
- canonical/arubanetworks arubaos
- version/arubanetworks arubaos/6.5.4.0
- version/arubanetworks arubaos/6.5.4.12
- version/arubanetworks arubaos/8.2.1.1