Priority LOW 28
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00679 · Published 2022-10-07 · No fix listed CWE-79
Priority LOW 24
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00858 · Published 2022-10-07 · No fix listed
Priority LOW 29
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00456 · Published 2022-10-07 · No fix listed
Priority LOW 35
An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0073 · Published 2022-10-07 · No fix listed CWE-78
Priority LOW 26
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00714 · Published 2022-10-07 · No fix listed CWE-79
Priority MEDIUM 45
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01416 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 45
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01416 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0213 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0213 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01868 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01868 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02054 · Published 2022-10-06 · No fix listed CWE-120
Priority MEDIUM 54
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculati…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.24639 · Published 2021-11-11 · No fix listed CWE-400
Priority LOW 31
A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and bel…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00977 · Published 2021-10-12 · No fix listed CWE-22
Priority LOW 27
A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10 and below; Aruba Instant 8.6.x.x: 8.6.0.4 and below.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0129 · Published 2021-10-12 · No fix listed CWE-134
Priority LOW 37
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03055 · Published 2021-10-12 · No fix listed CWE-78
Priority LOW 37
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03055 · Published 2021-10-12 · No fix listed CWE-78
Priority LOW 37
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03055 · Published 2021-10-12 · No fix listed CWE-78
Priority MEDIUM 47
A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02409 · Published 2021-10-12 · No fix listed CWE-120
Priority LOW 28
A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16.
CVSS 3.1MEDIUM 6.2· Physical · High privileges · No interaction · EPSS 0.00325 · Published 2021-09-07 · Fixed in 8.6.0.0-2.2.0.4 CWE-22
Priority LOW 35
A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8.7.1.2, 8.6.0.8, 8.5…
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00398 · Published 2021-09-07 · Fixed in 8.6.0.4-2.2.0.4 CWE-352
Priority LOW 25
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8.3.0.16.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01153 · Published 2021-09-07 · Fixed in 8.6.0.4-2.2.0.4 CWE-22
Priority LOW 31
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.0099 · Published 2021-09-07 · Fixed in 8.6.0.0-2.2.0.4 CWE-22
Priority LOW 31
A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01054 · Published 2021-09-07 · No fix listed CWE-22
Priority LOW 37
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03055 · Published 2021-09-07 · Fixed in 8.6.0.4-2.2.0.4 CWE-77
Load more