arubanetworks

578 tracked vulnerabilities.

CVE-2023-43510 MEDIUM
ClearPass Policy Manager - Command Injection
Oct 25, 2023
CVSS 4.7
EPSS 0.00
CVE-2023-43509 MEDIUM
ClearPass Policy Manager - Info Disclosure
Oct 25, 2023
CVSS 5.8
EPSS 0.00
CVE-2023-43508 MEDIUM
ClearPass Policy Manager - Privilege Escalation
Oct 25, 2023
CVSS 6.3
EPSS 0.00
CVE-2023-43507 HIGH
ClearPass Policy Manager - SQL Injection
Oct 25, 2023
CVSS 7.2
EPSS 0.00
CVE-2023-43506 HIGH
ClearPass OnGuard - Privilege Escalation
Oct 25, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-4896 MEDIUM
AirWave Management Platform - Info Disclosure
Oct 17, 2023
CVSS 6.8
EPSS 0.00
CVE-2023-38486 HIGH
Aruba 9200/9000 - Privilege Escalation
Sep 06, 2023
CVSS 7.7
EPSS 0.00
CVE-2023-38485 HIGH
HPE Aruba 9200/9000 Controllers BIOS - Early Boot Code Execution
Sep 06, 2023
CVSS 8.0
EPSS 0.00
CVE-2023-38484 HIGH
HPE Aruba 9200/9000 Controllers BIOS - Early Boot Code Execution
Sep 06, 2023
CVSS 8.0
EPSS 0.00
CVE-2023-37440 MEDIUM
Aruba EdgeConnect SD-WAN Orchestrator < 9.3.1 - Unauthenticated Server-Side Request Forgery
Aug 22, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-37439 MEDIUM
EdgeConnect SD-WAN Orchestrator < 9.1.8 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.1
EPSS 0.00
CVE-2023-37438 MEDIUM
Aruba EdgeConnect SD-WAN Orchestrator < 9.3.1 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37437 MEDIUM
EdgeConnect SD-WAN Orchestrator < 9.3.1 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37436 MEDIUM
EdgeConnect SD-WAN Orchestrator < 9.3.1 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37435 MEDIUM
EdgeConnect SD-WAN Orchestrator < 9.3.1 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37434 MEDIUM
EdgeConnect SD-WAN Orchestrator >=9.0.0 <9.0.5 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37433 MEDIUM
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.5 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37432 MEDIUM
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.4 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37431 MEDIUM
EdgeConnect SD-WAN Orchestrator >=9.0.0 <9.0.5 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37430 MEDIUM
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.4 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37429 MEDIUM
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.5 - Authenticated SQL Injection
Aug 22, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-37428 HIGH
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.4 - Authenticated Remote Code Execution
Aug 22, 2023
CVSS 7.2
EPSS 0.02
CVE-2023-37427 HIGH
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.4 - Authenticated Remote Code Execution
Aug 22, 2023
CVSS 7.2
EPSS 0.01
CVE-2023-37426 HIGH
EdgeConnect SD-WAN Orchestrator < 9.0.5 - Use of Hard-coded SSH Host Keys
Aug 22, 2023
CVSS 7.4
EPSS 0.00
CVE-2023-37425 HIGH
EdgeConnect SD-WAN Orchestrator 9.0.0-9.0.5 - Unauthenticated Stored Cross-Site Scripting
Aug 22, 2023
CVSS 8.0
EPSS 0.01
Products
arubaos 227 clearpass_policy_manager 136 sd-wan 88 airwave 36 clearpass 36 instant 33 edgeconnect_sd-wan_orchestrator 29 edgeconnect_enterprise 25 aruba_edgeconnect_enterprise_orchestrator 16 airwave_glass 12 aos-cx 12 aruba_instant 12 2540_firmware 5 2920_firmware 5 fabric_composer 5 2530_firmware 4 aruba_mobility_controller 4 2930_firmware 3 3810_firmware 3 5400r_firmware 3 aos-cx_firmware 3 2615_firmware 2 2620_firmware 2 2915_firmware 2 2930f_firmware 2 2930m_firmware 2 3810m_firmware 2 5406r_firmware 2 5412r_firmware 2 cx_6200f_firmware 2
Quick Filters
Critical CVEs With Exploits In CISA KEV