Unrated severityNVD Advisory· Published Jul 26, 2007· Updated Jun 16, 2026
CVE-2007-4023
CVE-2007-4023
Description
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
2cpe:2.3:h:aruba:mobility_controller:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:aruba:mobility_controller:*:*:*:*:*:*:*:*range: <=2.4.8.6-fips
- (no CPE)range: <=2.5.4.18, <=2.4.8.6-FIPS
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/26192nvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/680449nvdUS Government Resource
- osvdb.org/36469nvd
- www.arubanetworks.com/support/alerts/aid-070907b.ascnvd
- www.securityfocus.com/bid/25059nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/2646nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/35605nvd
News mentions
0No linked articles in our index yet.