Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6620
Reference (s):
- http://www.arubanetworks.com/support/alerts/aid-10282014.txt
- SECUNIA:61916
- URL: http://secunia.com/advisories/61916