Description
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- VU#680449 third-party-advisory
- 25059 vdb-entry
- ADV-2007-2646 vdb-entry
- 26192 third-party-advisory
- 1018457 vdb-entry
- 36469 vdb-entry
- http://www.arubanetworks.com/support/alerts/aid-070907b.asc
- aruba-mobility-login-xss(35605) vdb-entry