CVE-2019-5320: Arubanetworks 2530 Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, 16.10.* before 16.10.0003 are vulnerable to Cross Site Scripting in the web UI, leading to injection of code.

Affected products

• Arubanetworks 2530 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 2540 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 2920 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 2930 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 3810 Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)
• Arubanetworks 5400r Firmware: from 16.08.0, before 16.08.0009 (fixed in 16.08.0009); from 16.09.0, before 16.09.0007 (fixed in 16.09.0007); from 16.10.0, before 16.10.0003 (fixed in 16.10.0003)

Published 2020-08-26. Last modified 2026-06-17.