AI
Product
Airwave
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 23Medium 11Low 0
Watch
Add Airwave to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2031 | 9.8 | Jan 31 | Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which… Affected: before 8.2.0.0 |
| CVE-2021-25167 | 8.8 | Apr 29 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25166 | 8.8 | Apr 29 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25151 | 8.8 | Apr 28 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-26961 | 8.8 | Mar 5 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26960 | 8.8 | Mar 5 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2022-37918 | 8.1 | Dec 8 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls Affected: through 8.2.15.0 |
| CVE-2022-37917 | 8.1 | Dec 8 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls Affected: through 8.2.15.0 |
| CVE-2022-37916 | 8.1 | Dec 8 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls Affected: through 8.2.15.0 |
| CVE-2021-25163 | 8.1 | Apr 29 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25165 | 8.1 | Apr 28 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25153 | 8.1 | Apr 28 | A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25147 | 8.1 | Apr 28 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25154 | 7.5 | Apr 28 | A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2016-2032 | 7.5 | Jan 31 | A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a… Affected: before 8.2.0.0 |
| CVE-2025-37163 | 7.2 | Nov 18 | A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform Affected: before 8.3.0.5 |
| CVE-2015-2202 | 7.2 | Sep 5 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS Affected: 7.0.0 before 7.7.14.2 |
| CVE-2015-2201 | 7.2 | Sep 5 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users Affected: 7.0.0 before 7.7.14.2 |
| CVE-2021-25152 | 7.2 | Apr 28 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-26963 | 7.2 | Mar 5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26962 | 7.2 | Mar 5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2019-5326 | 7.2 | Feb 27 | An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform Affected: 8.0.0 before 8.2.10.1 |
| CVE-2019-5323 | 7.2 | Feb 27 | There are command injection vulnerabilities present in the AirWave application Affected: 8.0.0 before 8.2.10.1 |
| CVE-2021-26964 | 7.1 | Mar 5 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2023-4896 | 6.5 | Oct 17 | A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface Affected: through 8.2.15.2; 8.3.0 before 8.3.0.2 |
| CVE-2021-25164 | 6.5 | Apr 28 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-26969 | 6.5 | Mar 5 | A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26966 | 6.5 | Mar 5 | A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26965 | 6.5 | Mar 5 | A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26971 | 6.3 | Mar 5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26970 | 6.3 | Mar 5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-29137 | 6.1 | Apr 29 | A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-26967 | 6.1 | Mar 5 | A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-37715 | 4.8 | Aug 26 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.13.0 Affected: before 8.2.13.0 |
| CVE-2021-26968 | 4.8 | Mar 5 | A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2014-8368 | – | Nov 25 | The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified… Affected: 7.7.0 before 7.7.14; 8.0.0 before 8.0.5 |
Showing 36