Aruba Instant (IAP)
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-7084 | Aruba Instant 4.x prior to 6.4.4.8 - 4.2.4.12 Aruba Instant 6.5.x prior to 6.5.4.11 Aruba Instant 8.3.x prior to 8.3.0.6 Aruba Instant 8.4.x prior to 8.4.0.1 | A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute | CRITICAL 9.8 | 4.6 % | ||
| CVE-2018-7064 | Aruba Instant 4.x prior to 6.4.4.8 - 4.2.4.12 Aruba Instant 6.5.x prior to 6.5.4.11 Aruba Instant 8.3.x prior to 8.3.0.6 Aruba Instant 8.4.x prior to 8.4.0.1 | A reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aruba Instant web interface. An attacker could use thi | MEDIUM 6.1 | 1.4 % | ||
| CVE-2018-7082 | Aruba Instant 4.x prior to 6.4.4.8 - 4.2.4.12 Aruba Instant 6.5.x prior to 6.5.4.11 Aruba Instant 8.3.x prior to 8.3.0.6 Aruba Instant 8.4.x prior to 8.4.0.1 | A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary command | HIGH 7.2 | 4.3 % | ||
| CVE-2018-7083 | Aruba Instant 4.x prior to 6.4.4.8 - 4.2.4.12 Aruba Instant 6.5.x prior to 6.5.4.11 Aruba Instant 8.3.x prior to 8.3.0.6 Aruba Instant 8.4.x prior to 8.4.0.1 | If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at t | HIGH 7.5 | 1.8 % |