CVE-2019-5320
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Cross Site Scripting in the web UI, leading to injection of code.
Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R y 3810M, con versiones de firmware 16.08.* anteriores a 16.08.0009, 16.09.* anteriores a 16.09.0007, 16.10.* anteriores a 16.10.0003, son vulnerables a un ataque de tipo Cross Site Scripting en la Interfaz de Usuario web, conllevando a una inyección de código
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-04 CVE Reserved
- 2020-08-26 CVE Published
- 2023-05-12 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-007.txt | 2020-09-02 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arubanetworks Search vendor "Arubanetworks" | 5400r Firmware Search vendor "Arubanetworks" for product "5400r Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "5400r Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 5400r Search vendor "Arubanetworks" for product "5400r" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 5400r Firmware Search vendor "Arubanetworks" for product "5400r Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "5400r Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 5400r Search vendor "Arubanetworks" for product "5400r" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 5400r Firmware Search vendor "Arubanetworks" for product "5400r Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "5400r Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 5400r Search vendor "Arubanetworks" for product "5400r" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 3810 Firmware Search vendor "Arubanetworks" for product "3810 Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "3810 Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 3810 Search vendor "Arubanetworks" for product "3810" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 3810 Firmware Search vendor "Arubanetworks" for product "3810 Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "3810 Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 3810 Search vendor "Arubanetworks" for product "3810" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 3810 Firmware Search vendor "Arubanetworks" for product "3810 Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "3810 Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 3810 Search vendor "Arubanetworks" for product "3810" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2920 Firmware Search vendor "Arubanetworks" for product "2920 Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "2920 Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2920 Search vendor "Arubanetworks" for product "2920" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2920 Firmware Search vendor "Arubanetworks" for product "2920 Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "2920 Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2920 Search vendor "Arubanetworks" for product "2920" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2920 Firmware Search vendor "Arubanetworks" for product "2920 Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "2920 Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2920 Search vendor "Arubanetworks" for product "2920" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2930 Firmware Search vendor "Arubanetworks" for product "2930 Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "2930 Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2930 Search vendor "Arubanetworks" for product "2930" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2930 Firmware Search vendor "Arubanetworks" for product "2930 Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "2930 Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2930 Search vendor "Arubanetworks" for product "2930" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2930 Firmware Search vendor "Arubanetworks" for product "2930 Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "2930 Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2930 Search vendor "Arubanetworks" for product "2930" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2530 Firmware Search vendor "Arubanetworks" for product "2530 Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "2530 Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2530 Search vendor "Arubanetworks" for product "2530" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2530 Firmware Search vendor "Arubanetworks" for product "2530 Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "2530 Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2530 Search vendor "Arubanetworks" for product "2530" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2530 Firmware Search vendor "Arubanetworks" for product "2530 Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "2530 Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2530 Search vendor "Arubanetworks" for product "2530" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2530 Firmware Search vendor "Arubanetworks" for product "2530 Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "2530 Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2530 Search vendor "Arubanetworks" for product "2530" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2530 Firmware Search vendor "Arubanetworks" for product "2530 Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "2530 Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2530 Search vendor "Arubanetworks" for product "2530" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2530 Firmware Search vendor "Arubanetworks" for product "2530 Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "2530 Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2530 Search vendor "Arubanetworks" for product "2530" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2540 Firmware Search vendor "Arubanetworks" for product "2540 Firmware" | >= 16.08.0 < 16.08.0009 Search vendor "Arubanetworks" for product "2540 Firmware" and version " >= 16.08.0 < 16.08.0009" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2540 Search vendor "Arubanetworks" for product "2540" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2540 Firmware Search vendor "Arubanetworks" for product "2540 Firmware" | >= 16.09.0 < 16.09.0007 Search vendor "Arubanetworks" for product "2540 Firmware" and version " >= 16.09.0 < 16.09.0007" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2540 Search vendor "Arubanetworks" for product "2540" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | 2540 Firmware Search vendor "Arubanetworks" for product "2540 Firmware" | >= 16.10.0 < 16.10.0003 Search vendor "Arubanetworks" for product "2540 Firmware" and version " >= 16.10.0 < 16.10.0003" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 2540 Search vendor "Arubanetworks" for product "2540" | - | - |
Safe
|