Browse CVEs

HIGH 8.8 CVE-2024-26298 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,9502024-02-27 HIGH 8.8 CVE-2024-26294 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,9502024-02-27 HIGH 7.5 CVE-2023-45624 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 7.2 CVE-2023-45625 Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 7.2 CVE-2023-45626 An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code executio… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 MEDIUM 6.5 CVE-2023-45627 An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in the abilit… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,6002023-11-14 HIGH 8.2 CVE-2023-45619 There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploit… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-45620 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vul… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-45621 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vul… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-45622 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of th… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-45623 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of … Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 CRITICAL 9.8 CVE-2023-45614 There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-45615 There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-45616 There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $2,3002023-11-14 HIGH 8.2 CVE-2023-45617 There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploita… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 HIGH 8.2 CVE-2023-45618 There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successf… Arubaos 8.6.0.23 / 8.10.0.9+ Fix from $1,9502023-11-14 MEDIUM 6.3 CVE-2023-43510 A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the und… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,6002023-10-25 MEDIUM 5.8 CVE-2023-43509 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notification… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,6002023-10-25 HIGH 8.8 CVE-2023-43507 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injecti… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,9502023-10-25 HIGH 7.8 CVE-2023-43506 A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a h… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,9502023-10-25 MEDIUM 6.5 CVE-2023-43508 Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that… Clearpass Policy Manager 6.9.13 / 6.10.8+ Fix from $1,6002023-10-25 MEDIUM 6.5 CVE-2023-4896 A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management… Airwave 8.3.0.2+ Fix from $1,6002023-10-17 MEDIUM 6.4 CVE-2023-38484 Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbit… Arubaos 8.6.0.22 / 8.10.0.7+ Fix from $1,6002023-09-06 MEDIUM 6.4 CVE-2023-38485 Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbit… Arubaos 8.6.0.22 / 8.10.0.7+ Fix from $1,6002023-09-06 MEDIUM 6.4 CVE-2023-38486 A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass securi… Arubaos 8.6.0.22 / 8.10.0.7+ Fix from $1,6002023-09-06 HIGH 7.2 CVE-2015-2201 Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users. Airwave 7.7.14.2 / 8.0.7+ Fix from $1,9502023-09-05 HIGH 7.2 CVE-2015-2202 Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS. Airwave 7.7.14.2 / 8.0.7+ Fix from $1,9502023-09-05 HIGH 8.1 CVE-2023-37432 Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con… Edgeconnect Sd Wan Orchestrator after 9.2.5 Fix from $1,9502023-08-22 HIGH 8.1 CVE-2023-37433 Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con… Edgeconnect Sd Wan Orchestrator after 9.2.5 Fix from $1,9502023-08-22 HIGH 8.1 CVE-2023-37434 Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con… Edgeconnect Sd Wan Orchestrator after 9.2.5 Fix from $1,9502023-08-22