Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-37160 | 10.16.0000 – 10.16.1000 ; 10.15.0000 – 10.15.1020 ; 10.14.0000 – 10.14.1050 ; … | Authenticated Broken Access Control (BAC) in REST API Configuration Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-37159 | 10.16.0000 – 10.16.1000 ; 10.15.0000 – 10.15.1020 ; 10.14.0000 – 10.14.1050 ; … | Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software | HIGH 7.3 | 0.3 % | ||
| CVE-2025-37158 | 10.16.0000 – 10.16.1000 ; 10.15.0000 – 10.15.1020 ; 10.14.0000 – 10.14.1050 ; … | Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX | HIGH 8.8 | 0.6 % | ||
| CVE-2025-37156 | 10.16.0000 – 10.16.1000 ; 10.15.0000 – 10.15.1020 ; 10.14.0000 – 10.14.1050 ; … | ArubaOS-CX Platform-Level Denial-of-Service Vulnerability | MEDIUM 6.8 | 0.3 % | ||
| CVE-2025-37155 | 10.16.0000 – 10.16.1000 ; 10.15.0000 – 10.15.1020 ; 10.14.0000 – 10.14.1050 ; … | Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface | HIGH 7.8 | 0.1 % |