Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Analytics And Location Engine · all components

Priority MEDIUM 50

A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00594 Published 2026-09-22 No fix listed CWE-798
Priority MEDIUM 40

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00538 Published 2026-09-22 No fix listed CWE-200
Priority LOW 38

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00407 Published 2026-09-22 No fix listed CWE-200
Priority LOW 35

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00841 Published 2026-09-22 No fix listed CWE-78
Priority LOW 30

A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0042 Published 2026-09-22 No fix listed CWE-200
Open these records in search →