CVE-2008-2272: Aruba Networks Aruba Mobility Controller

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Aruba Networks Aruba Mobility Controller: version 2.4.8 only; version 2.5.5 only; version 2.5.6 only; version 3.1.1 only; version 3.2.0 only; version 3.3.1 only

Published 2008-05-16. Last modified 2026-06-16.