Approved changes feed: RSS · Atom

cpe:2.3:h:aruba_networks:mc-800:*:*:firmware_2.5.4.18:*:*:*:*:*

part: h version: * update: *

VendorAruba Networks (503fb965-7877-55c7-bb3b-72a2e451c0d1)
ProductMc 800 (8ed22b90-be5e-5021-be85-cfc7b0d4f989)
Editionfirmware_2.5.4.18
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6054 vulnerable 2026-06-08 04:50:07.567566 Details available
Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /screens URI, related to the url variable.
Published: 2007-11-20T20:00:00.000Z
Updated: 2024-08-07T15:54:26.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.