UpHeron
All vulnerabilities

Servers and applications

CVE-2013-2290

Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless access points to inject arbitrary web script or HTML via a crafted SSID.

Severity
Medium 4.3
Published
28 Mar 2013
Last changed
16 Jun 2026
Added to UpHeron
3 Nov 2026
Exploit chance
1.4% in the next 30 daysHigher than 72% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
Cross-site scripting (CWE-79)
Attack
Over the network · No login needed
Attacker can
Change some data
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • Version 6.2.0.2
  • Version 6.2.0.1
  • Version 6.2.0.0
  • Version 6.1.4.2
All 11 release lines
  • Version 6.1.2.3
  • Version 6.1.3.0
  • Version 6.1.3.1
  • Version 6.1.3.2
  • Version 6.1.3.4
  • Version 6.1.3.5
  • Version 6.1.3.6
  • Version 6.1.4.2
  • Version 6.2.0.0
  • Version 6.2.0.1
  • Version 6.2.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2290
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2290