A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
References
Link | Resource |
---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: hpe
Published: 2022-11-30T19:22:47.051Z
Updated: 2022-12-12T12:11:04.548862Z
Reserved: 2022-08-08T18:45:22.555Z
Link: CVE-2022-37925
JSON object: View
NVD Information
Status : Modified
Published: 2022-12-12T13:15:13.983
Modified: 2023-11-07T03:49:56.153
Link: CVE-2022-37925
JSON object: View
Redhat Information
No data.
CWE