CVE-2019-5314

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS

published September 13, 2019

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Published
2019-09-13T16:49Z
EPSS history
Timeline
  • 13 SEP 16:49Z
    Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS
    cvelistv5