← CVE Intelligence

CVE-2019-5314

n/a / Aruba Mobility Controllers PUBLISHED

Description (CNA)

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
n/a / Aruba Mobility Controllersaffected Aruba Mobility Controller firmware (ArubaOS) 6.x prior to 6.4.4.21 6.5.x prior to 6.5.4.13 8.x prior to 8.2.2.6 8.3.0.x prior to 8.3.0.7, 8.4.0.x and prior to 8.4.0.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.