Vendor CVEs

Arubanetworks

All CVEs

714 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-37922	Arubanetworks Edgeconnect Enterprise	Hig	0.47	7.2	0.01	Dec 12, 2022	Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37921	Arubanetworks Edgeconnect Enterprise	Hig	0.47	7.2	0.01	Dec 12, 2022	Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37920	Arubanetworks Edgeconnect Enterprise	Hig	0.47	7.2	0.01	Dec 12, 2022	Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37912	Arubanetworks Arubaos	Hig	0.47	7.2	0.02	Dec 12, 2022	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37903	Arubanetworks Arubaos	Hig	0.47	7.2	0.01	Dec 12, 2022	A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.
CVE-2022-37902	Arubanetworks Arubaos	Hig	0.47	7.2	0.02	Dec 12, 2022	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37901	Arubanetworks Arubaos	Hig	0.47	7.2	0.02	Dec 12, 2022	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37900	Arubanetworks Arubaos	Hig	0.47	7.2	0.02	Dec 12, 2022	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37899	Arubanetworks Arubaos	Hig	0.47	7.2	0.02	Dec 12, 2022	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37898	Arubanetworks Arubaos	Hig	0.47	7.2	0.01	Dec 12, 2022	Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37883	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	Sep 20, 2022	Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37882	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	Sep 20, 2022	Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37881	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	Sep 20, 2022	Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37880	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	Sep 20, 2022	Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37879	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	Sep 20, 2022	Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37878	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.01	Sep 20, 2022	Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-23683	Arubanetworks AOS-CX	Hig	0.47	7.2	0.02	Sep 6, 2022	Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to…
CVE-2022-23673	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	May 17, 2022	A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…
CVE-2022-23672	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	May 17, 2022	A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…
CVE-2022-23667	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	May 16, 2022	A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…
CVE-2021-40998	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Oct 15, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-40991	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.01	Oct 15, 2021	A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1.…
CVE-2021-40992	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.01	Oct 15, 2021	A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released…
CVE-2021-40988	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.04	Oct 15, 2021	A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released…
CVE-2021-40987	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Oct 15, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-40986	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Oct 15, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-37739	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Oct 15, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-40999	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.02	Oct 15, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-37732	Arubanetworks Instant	Hig	0.47	7.2	0.03	Oct 12, 2021	A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.11 and below; Aruba Instant 8.6.x.x: 8.6.0.6 and…
CVE-2021-37730	Arubanetworks Instant	Hig	0.47	7.2	0.03	Oct 12, 2021	A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and…
CVE-2021-37727	Arubanetworks Instant	Hig	0.47	7.2	0.03	Oct 12, 2021	A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba…
CVE-2021-37724	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.
CVE-2021-37723	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.
CVE-2021-37722	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37721	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37720	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37719	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37718	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and…
CVE-2021-37717	Arubanetworks Arubaos	Hig	0.47	7.2	0.03	Sep 7, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and…
CVE-2021-29143	Arubanetworks AOS-CX	Hig	0.47	7.2	0.03	Jul 22, 2021	A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba…
CVE-2021-34611	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Jul 8, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
CVE-2021-34610	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Jul 8, 2021	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
CVE-2021-29150	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.01	Jul 8, 2021	A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
CVE-2021-25152	Arubanetworks Airwave	Hig	0.47	7.2	0.01	Apr 28, 2021	A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVE-2021-25146	Arubanetworks Instant	Hig	0.47	7.2	0.03	Mar 30, 2021	A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x:…
CVE-2020-24635	Arubanetworks Instant	Hig	0.47	7.2	0.03	Mar 29, 2021	A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x:…
CVE-2021-26963	Arubanetworks Airwave	Hig	0.47	7.2	0.03	Mar 5, 2021	A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A…
CVE-2021-26962	Arubanetworks Airwave	Hig	0.47	7.2	0.03	Mar 5, 2021	A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A…
CVE-2021-26680	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Feb 23, 2021	A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands…
CVE-2021-26679	Arubanetworks ClearPass Policy Manager	Hig	0.47	7.2	0.03	Feb 23, 2021	A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands…

CVE-2022-37922HigDec 12, 2022
Arubanetworks
Edgeconnect Enterprise
risk 0.47cvss 7.2epss 0.01
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37921HigDec 12, 2022
Arubanetworks
Edgeconnect Enterprise
risk 0.47cvss 7.2epss 0.01
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37920HigDec 12, 2022
Arubanetworks
Edgeconnect Enterprise
risk 0.47cvss 7.2epss 0.01
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37912HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.02
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37903HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.01
A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.
CVE-2022-37902HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.02
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37901HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.02
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37900HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.02
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37899HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.02
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37898HigDec 12, 2022
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.01
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2022-37883HigSep 20, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37882HigSep 20, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37881HigSep 20, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37880HigSep 20, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37879HigSep 20, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-37878HigSep 20, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.01
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system…
CVE-2022-23683HigSep 6, 2022
Arubanetworks
AOS-CX
risk 0.47cvss 7.2epss 0.02
Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to…
CVE-2022-23673HigMay 17, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…
CVE-2022-23672HigMay 17, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…
CVE-2022-23667HigMay 16, 2022
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security…
CVE-2021-40998HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-40991HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.01
A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1.…
CVE-2021-40992HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.01
A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released…
CVE-2021-40988HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.04
A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released…
CVE-2021-40987HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-40986HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-37739HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-40999HigOct 15, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.02
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has…
CVE-2021-37732HigOct 12, 2021
Arubanetworks
Instant
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.11 and below; Aruba Instant 8.6.x.x: 8.6.0.6 and…
CVE-2021-37730HigOct 12, 2021
Arubanetworks
Instant
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and…
CVE-2021-37727HigOct 12, 2021
Arubanetworks
Instant
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba…
CVE-2021-37724HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.
CVE-2021-37723HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability.
CVE-2021-37722HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37721HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37720HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37719HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba…
CVE-2021-37718HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and…
CVE-2021-37717HigSep 7, 2021
Arubanetworks
Arubaos
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and…
CVE-2021-29143HigJul 22, 2021
Arubanetworks
AOS-CX
risk 0.47cvss 7.2epss 0.03
A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba…
CVE-2021-34611HigJul 8, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
CVE-2021-34610HigJul 8, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
CVE-2021-29150HigJul 8, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.01
A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
CVE-2021-25152HigApr 28, 2021
Arubanetworks
Airwave
risk 0.47cvss 7.2epss 0.01
A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVE-2021-25146HigMar 30, 2021
Arubanetworks
Instant
risk 0.47cvss 7.2epss 0.03
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x:…
CVE-2020-24635HigMar 29, 2021
Arubanetworks
Instant
risk 0.47cvss 7.2epss 0.03
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x:…
CVE-2021-26963HigMar 5, 2021
Arubanetworks
Airwave
risk 0.47cvss 7.2epss 0.03
A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A…
CVE-2021-26962HigMar 5, 2021
Arubanetworks
Airwave
risk 0.47cvss 7.2epss 0.03
A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A…
CVE-2021-26680HigFeb 23, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands…
CVE-2021-26679HigFeb 23, 2021
Arubanetworks
ClearPass Policy Manager
risk 0.47cvss 7.2epss 0.03
A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands…

Page 8 of 15