VYPR
← All advisories
Medium severity4.1NVD Advisory· Published May 16, 2023· Updated Jun 17, 2026

CVE-2023-30510

CVE-2023-30510

Description

A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset of URLs which can result in the possible disclosure of data due to the network position of the Aruba EdgeConnect Enterprise instance.

Affected products

3
  • Arubanetworks/Edgeconnect Enterprise2 versions
    cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*range: <=9.0.8.0
    • (no CPE)
  • Hewlett Packard Enterprise (HPE)/Aruba EdgeConnect Enterprise Softwarev5
    Range: ECOS 9.2.x.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.