Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

36 records in Airwave · all components

Priority MEDIUM 50

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass secu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05123 Published 2020-01-31 No fix listed CWE-20
Priority MEDIUM 41

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01473 Published 2021-04-29 Fixed in 8.2.12.1 CWE-78
Priority MEDIUM 41

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01514 Published 2021-04-29 Fixed in 8.2.12.1 CWE-78
Priority LOW 39

A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2021-03-05 Fixed in 8.2.12.0 CWE-352
Priority LOW 39

A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2021-03-05 Fixed in 8.2.12.0 CWE-352
Priority LOW 38

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01257 Published 2021-04-28 Fixed in 8.2.12.1 CWE-287
Priority LOW 37

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0323 Published 2021-03-05 Fixed in 8.2.12.0 CWE-78
Priority LOW 37

A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01088 Published 2021-04-28 Fixed in 8.2.12.1 CWE-89
Priority LOW 36

There are command injection vulnerabilities present in the AirWave application.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02563 Published 2020-02-27 Fixed in 8.2.10.1 CWE-77
Priority LOW 35

An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01936 Published 2020-02-27 Fixed in 8.2.10.1 CWE-502
Priority LOW 33

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00993 Published 2021-03-05 Fixed in 8.2.12.0 CWE-863
Load more
Open these records in search →