Aruba AirWave Management Platform
27 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-37918 | 8.2.15.0 and below | Broken Access Control for some Web-based Management URLs in AirWave Management Platform | HIGH 8.1 | 0.8 % | ||
| CVE-2022-37917 | 8.2.15.0 and below | Broken Access Control for some Web-based Management URLs in AirWave Management Platform | HIGH 8.1 | 0.8 % | ||
| CVE-2022-37916 | 8.2.15.0 and below | Broken Access Control for some Web-based Management URLs in AirWave Management Platform | HIGH 8.1 | 0.8 % | ||
| CVE-2021-37715 | Prior to 8.2.13.0 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.13.0. Aruba h | MEDIUM 4.8 | 0.5 % | ||
| CVE-2021-29137 | Prior to 8.2.12.1 | A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-25167 | Prior to 8.2.12.1 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has relea | HIGH 8.8 | 1.5 % | ||
| CVE-2021-25166 | Prior to 8.2.12.1 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has relea | HIGH 8.8 | 1.5 % | ||
| CVE-2021-25163 | Prior to 8.2.12.1 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has relea | HIGH 8.1 | 1.2 % | ||
| CVE-2021-25165 | Prior to 8.2.12.1 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has relea | HIGH 8.1 | 1.2 % | ||
| CVE-2021-25164 | Prior to 8.2.12.1 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has relea | MEDIUM 6.5 | 1.3 % | ||
| CVE-2021-25152 | Prior to 8.2.12.1 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has | HIGH 7.2 | 1.2 % | ||
| CVE-2021-25153 | Prior to 8.2.12.1 | A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released pa | HIGH 8.1 | 1.1 % | ||
| CVE-2021-25154 | Prior to 8.2.12.1 | A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has r | HIGH 7.5 | 1.0 % | ||
| CVE-2021-25151 | Prior to 8.2.12.1 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has | HIGH 8.8 | 12 % | ||
| CVE-2021-25147 | Prior to 8.2.12.1 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. A | HIGH 8.1 | 1.3 % | ||
| CVE-2021-26971 | Prior to 8.2.12.0 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8. | MEDIUM 6.3 | 1.3 % | ||
| CVE-2021-26969 | Prior to 8.2.12.0 | A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): | MEDIUM 6.5 | 1.5 % | ||
| CVE-2021-26970 | Prior to 8.2.12.0 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8. | MEDIUM 6.3 | 1.4 % | ||
| CVE-2021-26968 | Prior to 8.2.12.0 | A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior | MEDIUM 4.8 | 0.7 % | ||
| CVE-2021-26967 | Prior to 8.2.12.0 | A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12. | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-26965 | Prior to 8.2.12.0 | A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multip | MEDIUM 6.5 | 1.2 % | ||
| CVE-2021-26966 | Prior to 8.2.12.0 | A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multip | MEDIUM 6.5 | 1.2 % | ||
| CVE-2021-26963 | Prior to 8.2.12.0 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8. | HIGH 7.2 | 3.0 % | ||
| CVE-2021-26964 | Prior to 8.2.12.0 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. | HIGH 7.1 | 1.0 % | ||
| CVE-2021-26960 | Prior to 8.2.12.0 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Pri | HIGH 8.8 | 0.6 % | ||
| CVE-2021-26962 | Prior to 8.2.12.0 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8. | HIGH 7.2 | 3.2 % | ||
| CVE-2021-26961 | Prior to 8.2.12.0 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Pri | HIGH 8.8 | 0.6 % |