Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Arista Networks CloudVision Portal — arista.com/en/support/advisories-notices/security-advisory/… Clear all filters
TI-2026-68566 CVE-2026-101150 · GHSA-gqx4-ph4p-hhhf

Server-side request forgery in Arista CloudVision Portal

Priority LOW 23

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00218 Published 2026-10-06 No fix listed CWE-918
TI-2026-68565 CVE-2026-101149 · GHSA-x5hx-36j4-jgqp

Server-side request forgery in Arista CloudVision Portal SSO

Priority LOW 23

Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00218 Published 2026-10-06 No fix listed CWE-918