vulnerability
Aruba AOS-S: CVE-2023-39266: Unauthenticated Stored Cross-Site Scripting in AOS-S Switches
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:H/Au:N/C:C/I:C/A:C) | Aug 29, 2023 | Mar 6, 2025 | Jul 2, 2025 |
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Aug 29, 2023
Added
Mar 6, 2025
Modified
Jul 2, 2025
Description
A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present.
A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Solution
aruba-aos-s-cve-2023-39266
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.