Browse CVEs

CRITICAL 9.8 CVE-2022-37897 There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to … Sd Wan 6.5.4.22 / 8.6.0.17+ Fix from $2,3002022-12-12 HIGH 8.8 CVE-2022-37903 A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. S… Sd Wan 6.5.4.23 / 8.6.0.18+ Fix from $1,9502022-12-12 HIGH 8.8 CVE-2022-37904 Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Succe… Sd Wan 6.5.4.22 / 8.6.0.17+ Fix from $1,9502022-12-12 HIGH 8.8 CVE-2022-37905 Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Succe… Sd Wan 6.5.4.22 / 8.6.0.17+ Fix from $1,9502022-12-12 HIGH 7.2 CVE-2022-37898 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results… Sd Wan 6.5.4.23 / 8.6.0.18+ Fix from $1,9502022-12-12 HIGH 7.2 CVE-2022-37899 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results… Sd Wan 6.5.4.23 / 8.6.0.18+ Fix from $1,9502022-12-12 HIGH 7.2 CVE-2022-37900 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results… Sd Wan 6.5.4.23 / 8.6.0.18+ Fix from $1,9502022-12-12 HIGH 7.2 CVE-2022-37901 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results… Sd Wan 6.5.4.23 / 8.6.0.18+ Fix from $1,9502022-12-12 HIGH 7.2 CVE-2022-37902 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results… Sd Wan 6.5.4.23 / 8.6.0.18+ Fix from $1,9502022-12-12 HIGH 8.1 CVE-2022-37916 Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. T… Airwave after 8.2.15.0 Fix from $1,9502022-12-08 HIGH 8.1 CVE-2022-37917 Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. T… Airwave after 8.2.15.0 Fix from $1,9502022-12-08 HIGH 8.1 CVE-2022-37918 Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. T… Airwave after 8.2.15.0 Fix from $1,9502022-12-08 CRITICAL 9.8 CVE-2022-37913 Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to … Aruba Edgeconnect Enterprise Orchestrator 8.10.23.40009 / 9.0.7.40108+ Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2022-37914 Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to … Aruba Edgeconnect Enterprise Orchestrator 8.10.23.40009 / 9.0.7.40108+ Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2022-37915 A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to … Aruba Edgeconnect Enterprise Orchestrator 9.1.3.40197+ Fix from $2,3002022-10-28 MEDIUM 6.1 CVE-2022-37896 A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct a reflected cross-site script… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $1,6002022-10-07 HIGH 7.8 CVE-2022-37893 An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $1,9502022-10-07 MEDIUM 6.5 CVE-2022-37894 An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $1,6002022-10-07 CRITICAL 9.8 CVE-2022-37885 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-07 CRITICAL 9.8 CVE-2022-37886 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-07 CRITICAL 9.8 CVE-2022-37887 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-07 CRITICAL 9.8 CVE-2022-37889 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-07 CRITICAL 9.8 CVE-2022-37890 Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation res… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-07 CRITICAL 9.8 CVE-2022-37891 Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation res… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-07 MEDIUM 5.4 CVE-2022-37892 A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a stored cro… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $1,6002022-10-07 CRITICAL 9.8 CVE-2022-37888 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special… Arubaos 6.4.4.8-4.2.4.21 / 6.5.4.24+ Fix from $2,3002022-10-06 HIGH 8.8 CVE-2022-23685 A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Fo… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-23692 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injecti… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-23693 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injecti… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-23694 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injecti… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20