Browse CVEs

CRITICAL 9.8 CVE-2020-24636 A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant … Instant 6.5.4.18 / 8.3.0.14+ Fix from $2,3002021-03-29 HIGH 7.2 CVE-2020-24635 A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant … Instant 6.5.4.18 / 8.3.0.14+ Fix from $1,9502021-03-29 MEDIUM 6.8 CVE-2019-5317 A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.… Instant 6.5.4.16 / 8.3.0.12+ Fix from $1,6002021-03-29 HIGH 7.2 CVE-2021-26963 A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. V… Airwave 8.2.12.0+ Fix from $1,9502021-03-05 HIGH 7.1 CVE-2021-26964 A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnera… Airwave 8.2.12.0+ Fix from $1,9502021-03-05 MEDIUM 6.5 CVE-2021-26965 A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulner… Airwave 8.2.12.0+ Fix from $1,6002021-03-05 MEDIUM 6.5 CVE-2021-26966 A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulner… Airwave 8.2.12.0+ Fix from $1,6002021-03-05 MEDIUM 6.5 CVE-2021-26969 A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to… Airwave 8.2.12.0+ Fix from $1,6002021-03-05 MEDIUM 6.3 CVE-2021-26970 A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. V… Airwave 8.2.12.0+ Fix from $1,6002021-03-05 MEDIUM 6.3 CVE-2021-26971 A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. V… Airwave 8.2.12.0+ Fix from $1,6002021-03-05 MEDIUM 6.1 CVE-2021-26967 A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vuln… Airwave 8.2.12.0+ Fix from $1,6002021-03-05 HIGH 8.8 CVE-2021-26961 A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2… Airwave 8.2.12.0+ Fix from $1,9502021-03-05 HIGH 7.2 CVE-2021-26962 A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. V… Airwave 8.2.12.0+ Fix from $1,9502021-03-05 HIGH 8.8 CVE-2021-26960 A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2… Airwave 8.2.12.0+ Fix from $1,9502021-03-05 HIGH 7.2 CVE-2021-26680 A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14… Clearpass Policy Manager 6.7.14 / 6.8.8+ Fix from $1,9502021-02-23 HIGH 7.8 CVE-2021-26677 A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6… Clearpass Policy Manager 6.7.14 / 6.8.7+ Fix from $1,9502021-02-23 HIGH 7.2 CVE-2021-26679 A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14… Clearpass Policy Manager 6.7.14 / 6.8.8+ Fix from $1,9502021-02-23 MEDIUM 5.3 CVE-2020-7120 A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF… Clearpass Policy Manager 6.8.8 / 6.9.3+ Fix from $1,6002021-02-23 HIGH 7.2 CVE-2021-26681 A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14… Clearpass Policy Manager 6.7.14 / 6.8.7+ Fix from $1,9502021-02-23 HIGH 7.2 CVE-2021-26683 A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14… Clearpass Policy Manager 6.9.5+ Fix from $1,9502021-02-23 HIGH 7.2 CVE-2021-26684 A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14… Clearpass Policy Manager 6.8.8 / 6.9.5+ Fix from $1,9502021-02-23 MEDIUM 6.5 CVE-2021-26686 A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF… Clearpass Policy Manager 6.7.14 / 6.8.7+ Fix from $1,6002021-02-23 MEDIUM 6.1 CVE-2021-26678 A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5,… Clearpass Policy Manager 6.7.14 / 6.8.6+ Fix from $1,6002021-02-23 MEDIUM 6.1 CVE-2021-26682 A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6… Clearpass Policy Manager 6.7.14 / 6.8.8+ Fix from $1,6002021-02-23 MEDIUM 6.5 CVE-2021-26685 A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF… Clearpass Policy Manager 6.9.5+ Fix from $1,6002021-02-23 CRITICAL 9.8 CVE-2020-24639EPSS 7% There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airw… Airwave Glass 1.3.3+ Fix from $2,3002021-01-15 CRITICAL 9.8 CVE-2020-24640 There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Ai… Airwave Glass 1.3.3+ Fix from $2,3002021-01-15 HIGH 7.5 CVE-2020-24641 In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully ex… Airwave Glass 1.3.3+ Fix from $1,9502021-01-15 HIGH 7.2 CVE-2020-24638 Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glass… Airwave Glass 1.3.3+ Fix from $1,9502021-01-15 MEDIUM 6.8 CVE-2020-12148 A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbi… Edgeconnect Enterprise 8.1.9.15 / 8.3.0.8+ Fix from $1,6002020-12-11