Aruba AirWave versions 8.2.3 and below suffer from XXE injection and cross site scripting vulnerabilities. Continue reading...