CVE-2016-8527

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is present in the VisualRF component of AirWave. By exploiting this vulnerability, an attacker who can trick a logged-in AirWave administrative user into clicking a link could obtain sensitive information, such as session cookies or passwords. The vulnerability requires that an administrative users click on the malicious link while currently logged into AirWave in the same browser.

• CWE-79

• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-001.txtVendor Advisory
• http://www.securityfocus.com/bid/96495Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41482/Exploit, Third Party Advisory, VDB Entry
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-001.txtVendor Advisory
• http://www.securityfocus.com/bid/96495Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41482/Exploit, Third Party Advisory, VDB Entry

Published

Aug 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8521A Remote click jacking vulnerability in HPE Diagnostics vers…
• CVE-2016-8522A cross-site scripting vulnerability in HPE Diagnostics vers…
• CVE-2016-8523A Remote Arbitrary Code Execution vulnerability in HPE Smart…
• CVE-2016-8524Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8525A Remote Disclosure of Information vulnerability in HPE iMC …
• CVE-2016-8526Aruba Airwave all versions up to, but not including, 8.2.3.1…
• CVE-2016-8528A Remote Escalation of Privilege vulnerability in HPE Helion…
• CVE-2016-8529A Remote Arbitrary Command Execution vulnerability in HPE St…
• CVE-2016-8530A remote denial of service vulnerability in HPE iMC PLAT ver…
• CVE-2016-8531A remote information disclosure vulnerability in HPE Matrix …
• CVE-2016-8532A cross site scripting vulnerability in HPE Matrix Operating…
• CVE-2016-8533A remote priviledge escalation vulnerability in HPE Matrix O…