Read the docs

Arista

Records217All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical34CVSS 9.0–10.0
CVSS high94CVSS 7.0–8.9

Exploited now

Arista records in CISA KEV
TI-2026-79524 Arista VeloCloud Orchestrator SQL Injection Vulnerability Priority CRITICAL 100KEV 2026-10-23TI-2026-63212 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2026-09-22TI-2026-13992 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Priority CRITICAL 100KEV 2026-07-27TI-2026-06569 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Priority CRITICAL 90KEV 2026-06-09TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28

Components

Products in the NVD configurations · select one to filter the records
Eos 46 records CRITICAL Ng Firewall 20 records HIGH Cloudvision Portal 10 records CRITICAL C-65 Firmware 8 records LOW C-75 Firmware 8 records LOW O-90 Firmware 8 records LOW W-68 Firmware 8 records LOW C-200 Firmware 7 records LOW

Records

20 records in Ng Firewall · all components

TI-2024-18496 CVE-2024-27889 · GHSA-9w96-264r-8f55

SQL injection in Arista Edge Threat Management - Arista NG Firewall

Priority MEDIUM 49

Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08794 Published 2024-03-04 No fix listed CWE-89
TI-2025-02419 CVE-2025-2767 · GHSA-vcjh-9r25-r392

Cross-site scripting in Arista NG Firewall

Priority MEDIUM 44

Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00654 Published 2025-04-23 No fix listed CWE-79
TI-2024-11889 CVE-2024-12829 · GHSA-jphv-3r8c-vvcp

OS command injection in Arista NG Firewall

Priority MEDIUM 43

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01292 Published 2024-12-20 No fix listed CWE-78
TI-2026-20727 CVE-2026-25623 · GHSA-q9j2-m53h-872m

Arista Edge Threat Management NGFW UI Arbitrary Command Execution

Priority LOW 39

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW).

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.05621 Published 2026-06-05 No fix listed CWE-78
TI-2024-08483 CVE-2024-9134 · GHSA-6cj3-78w9-39gx

SQL injection in Arista Edge Threat Management

Priority LOW 39

Multiple SQL Injection vulnerabilities exist in the reporting application.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00638 Published 2025-01-10 No fix listed CWE-89
TI-2024-11890 CVE-2024-12830 · GHSA-g2qv-6658-vpj8

Path traversal in Arista NG Firewall

Priority LOW 36

Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01023 Published 2024-12-20 No fix listed CWE-22
TI-2024-11891 CVE-2024-12831 · GHSA-gjgj-cghx-qc4f

Incorrect authorization in Arista NG Firewall

Priority LOW 33

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00162 Published 2024-12-20 No fix listed CWE-863
TI-2024-11892 CVE-2024-12832 · GHSA-68q3-px6h-m7wq

SQL injection in Arista NG Firewall

Priority LOW 31

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00496 Published 2024-12-20 No fix listed CWE-89
TI-2026-20728 CVE-2026-25624 · GHSA-5h7h-rxr9-2ccv

Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting

Priority LOW 25

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW).

CVSS 4.0MEDIUM 5.8 Network High privileges User interaction EPSS 0.00154 Published 2026-06-05 No fix listed CWE-79
Open these records in search →