Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

16 records in Aruba Edgeconnect Enterprise Orchestrator · all components

Priority MEDIUM 52

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01833 Published 2022-10-28 No fix listed CWE-78
Priority MEDIUM 42

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01015 Published 2023-01-03 No fix listed CWE-89
Priority MEDIUM 42

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01015 Published 2023-01-03 No fix listed CWE-89
Priority MEDIUM 42

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01015 Published 2023-01-03 No fix listed CWE-89
Priority MEDIUM 42

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01015 Published 2023-01-03 No fix listed CWE-89
Priority MEDIUM 42

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01015 Published 2023-01-03 No fix listed CWE-89
Priority MEDIUM 40

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrat…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.0054 Published 2023-01-03 No fix listed CWE-79
Priority LOW 25

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00453 Published 2023-01-03 No fix listed CWE-384
Open these records in search →