Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface by uploading a specially crafted file. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
Aruba Networks EdgeConnect 跨站脚本漏洞
Vulnerability Description
Aruba Networks EdgeConnect是美国Aruba Networks公司的一个边缘连接管理平台。 Aruba Networks EdgeConnect 存在安全漏洞，该漏洞源于基于 Web 的管理界面中存在一个漏洞，可能允许远程攻击者对界面用户进行反射型跨站脚本 (XSS) 攻击，攻击者利用该漏洞可以在 Aruba EdgeConnect Enterprise 软件版本中受影响的界面上下文中在受害者的浏览器中执行任意脚本代码，以下产品和版本受到影响：ECOS 9.2.1.0 及之前版本、
CVSS Information
N/A
Vulnerability Type
N/A