CVE-2007-6054: Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mob...

Security readout for executives and security teams

This is an older cross-site scripting issue in the Aruba 800 Mobility Controller management login page. If the management interface is reachable, an attacker could cause script or HTML to run in a user's browser through crafted page input. Business urgency depends on whether legacy controllers remain deployed and whether their management interfaces are exposed. Exposure is most likely in organizations still running legacy Aruba 800 Mobility Controller firmware, especially where the web management interface is reachable from untrusted networks. The supplied data does not identify other Aruba products as affected. Treat this as a legacy exposure cleanup item unless affected controllers are internet-reachable or used in sensitive network segments. Prioritize asset confirmation, management-plane restriction, and vendor-supported update or replacement decisions. Mitigation focus: Inventory Aruba 800 Mobility Controller deployments and firmware versions.; Review Aruba advisory aid-070907b for vendor-supported fixes or workarounds.; Restrict management interface access to trusted administrative networks..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.