Vulnerabilities

TI-2007-03894 CVE-2007-4023 · GHSA-r847-794v-mgw3

Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility…

LOW 23

Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or H…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2007-07-26 No fix listed

TI-2007-00908 CVE-2007-0932 · GHSA-37c7-c3v8-w5p9

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent…

LOW 37

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02338 Published 2007-02-14 No fix listed CWE-264

TI-2007-00907 CVE-2007-0931 · GHSA-5wh3-p47f-g782

Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers…

MEDIUM 42

Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of ser…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0606 Published 2007-02-14 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility…

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent…

Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers…