漏洞标题
N/A
漏洞描述信息
Aruba EdgeConnect Enterprise Orchestrator 的 Web 管理界面中的多个漏洞可能导致远程攻击者对界面用户的 reflected cross-site scripting (XSS) 攻击。成功利用此漏洞可能导致攻击者在受影响界面上下文中执行任意脚本代码，Aruba EdgeConnect Enterprise Orchestration Software 版本(s):Aruba EdgeConnect Enterprise Orchestrator (On-premises)、Aruba EdgeConnect Enterprise Orchestrator-as-a-Service、Aruba EdgeConnect Enterprise Orchestrator-SP 和 Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 及以下版本，- Orchestrator 9.1.4.40436 及以下版本，- Orchestrator 9.0.7.40110 及以下版本，- Orchestrator 8.10.23.40015 及以下版本，- 未特别提及的 Orchestrator 版本中的任何其他分支。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
Aruba Networks ClearPass Policy Manager 跨站脚本漏洞
漏洞描述信息
Aruba Networks ClearPass Policy Manager是美国安移通（Aruba Networks）公司的一个应用系统提供无线网络安全接入管理系统 Aruba Networks ClearPass Policy Manager 存在安全漏洞。攻击者利用该漏洞执行跨站脚本攻击，从而执行任意脚本代码。以下产品及版本受到影响：Aruba EdgeConnect Enterprise Orchestrator 9.2.1.40179版本及之前版本、9.1.4.40436版本及之前版本、9.0
CVSS信息
N/A
漏洞类别
跨站脚本