Vendors / Arubanetworks Records 684 All Threatist records
Exploited (KEV) 1
CVSS critical 106
CVSS high 363
Exploited now Arubanetworks records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0755 · Published 2021-01-15 · Fixed in 1.3.3 CWE-502
Priority MEDIUM 48
There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03038 · Published 2021-01-15 · Fixed in 1.3.3
Priority MEDIUM 46
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02206 · Published 2020-11-04 · Fixed in 1.3.2 CWE-306
Priority MEDIUM 46
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01827 · Published 2020-10-26 · Fixed in 1.3.2
Priority MEDIUM 45
A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01385 · Published 2020-10-26 · Fixed in 1.3.2
Priority MEDIUM 41
A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01442 · Published 2020-10-26 · Fixed in 1.3.2 CWE-269
Priority LOW 38
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03325 · Published 2021-01-15 · Fixed in 1.3.3
Priority LOW 37
A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02739 · Published 2020-10-26 · Fixed in 1.3.2
Priority LOW 37
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02739 · Published 2020-10-26 · Fixed in 1.3.2
Priority LOW 37
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02739 · Published 2020-11-04 · Fixed in 1.3.2
Priority LOW 36
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01481 · Published 2021-01-15 · Fixed in 1.3.3 CWE-287
Priority LOW 28
A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS 3.1 MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00826 · Published 2020-10-26 · Fixed in 1.3.2 CWE-918
Open these records in search → All records by CVSS severity
106 363 207 8 0
THREATIST.IORead the docs