CVE-2023-35978

Summary

CVE-2023-35978 is a newly identified vulnerability affecting ArubaOS. This issue permits unauthenticated remote attackers to execute reflected cross-site scripting (XSS) attacks against users of the web-based management interface. Successful exploitation of this vulnerability could allow an attacker to inject and execute arbitrary script code in a victim's browser, potentially leading to unauthorized access or data theft.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.