Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-005.txt | vendor advisory |