AI
Product
Aruba Instant
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 3Low 0
Watch
Add Aruba Instant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-37726 | 9.8 | Oct 12 | A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2 Affected: 8.7.0.0 before 8.7.1.3 |
| CVE-2016-2031 | 9.8 | Jan 31 | Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which… Affected: before 4.1.3.0; 4.2.3.1 |
| CVE-2018-7084 | 9.8 | May 10 | A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the… Affected: 4.0 before 4.2.4.12; 6.5.0 before 6.5.4.11; 8.3.0 before 8.3.0.6; 8.4.0 before 8.4.0.1 |
| CVE-2016-2032 | 7.5 | Jan 31 | A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a… Affected: before 4.1.3.0; 4.2.3.1 |
| CVE-2018-7083 | 7.5 | May 10 | If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed Affected: 4.0 before 4.2.4.12; 6.5.0 before 6.5.4.11; 8.3.0 before 8.3.0.6 |
| CVE-2021-37732 | 7.2 | Oct 12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x:… Affected: 6.4.0.2-4.1.0.0 before 6.4.4.8-4.2.4.18; 6.5.4.0 before 6.5.4.19; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.7; 8.7.0.0 before 8.7.1.1 |
| CVE-2021-37730 | 7.2 | Oct 12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x:… Affected: 6.4.0.2-4.1.0.0 before 6.4.4.8-4.2.4.19; 6.5.4.0 before 6.5.4.20; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.11; 8.7.0.0 before 8.7.1.3 |
| CVE-2021-37727 | 7.2 | Oct 12 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and… Affected: 6.4.0.2-4.1.0.0 before 6.4.4.8-4.2.4.19; 6.5.4.0 before 6.5.4.20; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.11; 8.7.0.0 before 8.7.1.3 |
| CVE-2018-7082 | 7.2 | May 10 | A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system Affected: 4.0 before 4.2.4.12; 6.5.0 before 6.5.4.11; 8.3.0.0 before 8.3.0.6; 8.4.0 before 8.4.0.1 |
| CVE-2021-37734 | 6.5 | Oct 12 | A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and… Affected: 6.4.0.2-4.1.0.0 before 6.4.4.8-4.2.4.19; 6.5.4.0 before 6.5.4.20; 8.5.0.0 before 8.5.0.13; 8.6.0.0 before 8.6.0.12; 8.7.0.0 before 8.7.1.4 |
| CVE-2018-7064 | 6.1 | May 10 | A reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aruba Instant web interface Affected: 4.0 before 4.2.4.12; 6.5.0 before 6.5.4.11; 8.3.0 before 8.3.0.6; 8.4.0 before 8.4.0.1 |
| CVE-2021-37735 | 5.3 | Oct 12 | A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10 and below; Aruba… Affected: 6.5.4.0 before 6.5.4.18; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.5 |
Showing 12