Cross site scripting

2021-07-1920:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

CPENameOperatorVersion
aruba_instantge8.5.0
aruba_instantle8.5.0.0
aruba_instantge8.4.0
aruba_instantle8.4.0.5
aruba_instantge8.3.0
aruba_instantle8.3.0.7
aruba_instantge6.5.0
aruba_instantle6.5.4.13
aruba_instantge6.4.0
aruba_instantle6.4.4.8

Name	Operator	Version
aruba_instant	ge	8.5.0
aruba_instant	le	8.5.0.0
aruba_instant	ge	8.4.0
aruba_instant	le	8.4.0.5
aruba_instant	ge	8.3.0
aruba_instant	le	8.3.0.7
aruba_instant	ge	6.5.0
aruba_instant	le	6.5.4.13
aruba_instant	ge	6.4.0
aruba_instant	le	6.4.4.8

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt