Read the docs

Aruba

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Aruba records in CISA KEV

No Aruba vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records

TI-2026-10804 CVE-2026-12602 · GHSA-58j4-vm73-hgvh

Incorrect permissions in ArubaSign by Aruba

Priority LOW 39

Incorrect default permissions in ArubaSign, affecting versions prior to v4.6.6.

CVSS 4.0HIGH 8.8 Local No auth User interaction EPSS 0.00175 Published 2026-06-22 Fixed in 4.6.6 CWE-276
Priority LOW 37

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02338 Published 2007-02-14 No fix listed CWE-264
Priority LOW 29

A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aru…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0048 Published 2021-07-19 No fix listed
Priority LOW 28

A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below;…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-07-19 No fix listed CWE-79
Open these records in search →