CVE-2023-39266

Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch

High · published August 29, 2023

CVSS v3.1
8.3
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.0th percentile
Published
2023-08-29T19:20Z
EPSS history
Timeline
  • 29 AUG 19:20Z
    Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch
    cvelistv5