AG
Product
Airwave Glass
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 1Low 0
Watch
Add Airwave Glass to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24640 | 9.8 | Jan 15 | There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3 Affected: before 1.3.3 |
| CVE-2020-24639 | 9.8 | Jan 15 | There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3 Affected: before 1.3.3 |
| CVE-2020-7128 | 9.8 | Nov 4 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-7127 | 9.8 | Oct 26 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-7124 | 9.8 | Oct 26 | A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-7125 | 8.8 | Oct 26 | A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-24641 | 7.5 | Jan 15 | In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in… Affected: before 1.3.3 |
| CVE-2020-24638 | 7.2 | Jan 15 | Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli Affected: before 1.3.3 |
| CVE-2020-7129 | 7.2 | Nov 4 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-24632 | 7.2 | Oct 26 | A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-24631 | 7.2 | Oct 26 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
| CVE-2020-7126 | 5.8 | Oct 26 | A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2 Affected: before 1.3.2 |
Showing 12
