AI
Product
Airwave
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 23Medium 11Low 0
Watch
Add Airwave to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25167 | 8.8 | Apr 29 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25166 | 8.8 | Apr 29 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25151 | 8.8 | Apr 28 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-26961 | 8.8 | Mar 5 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26960 | 8.8 | Mar 5 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2022-37918 | 8.1 | Dec 8 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls Affected: through 8.2.15.0 |
| CVE-2022-37917 | 8.1 | Dec 8 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls Affected: through 8.2.15.0 |
| CVE-2022-37916 | 8.1 | Dec 8 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls Affected: through 8.2.15.0 |
| CVE-2021-25163 | 8.1 | Apr 29 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25165 | 8.1 | Apr 28 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25153 | 8.1 | Apr 28 | A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25147 | 8.1 | Apr 28 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-25154 | 7.5 | Apr 28 | A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2016-2032 | 7.5 | Jan 31 | A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a… Affected: before 8.2.0.0 |
| CVE-2025-37163 | 7.2 | Nov 18 | Authenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI Affected: before 8.3.0.5 |
| CVE-2015-2202 | 7.2 | Sep 5 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS Affected: 7.0.0 before 7.7.14.2 |
| CVE-2015-2201 | 7.2 | Sep 5 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users Affected: 7.0.0 before 7.7.14.2 |
| CVE-2021-25152 | 7.2 | Apr 28 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1 Affected: before 8.2.12.1 |
| CVE-2021-26963 | 7.2 | Mar 5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2021-26962 | 7.2 | Mar 5 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
| CVE-2019-5326 | 7.2 | Feb 27 | An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform Affected: 8.0.0 before 8.2.10.1 |
| CVE-2019-5323 | 7.2 | Feb 27 | There are command injection vulnerabilities present in the AirWave application Affected: 8.0.0 before 8.2.10.1 |
| CVE-2021-26964 | 7.1 | Mar 5 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0 Affected: before 8.2.12.0 |
Showing 23