AR
Product
Arubaos
247
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 53High 127Medium 56Low 4
Watch
Add Arubaos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22776 | 4.9 | Feb 28 | Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2022-37895 | 4.9 | Oct 7 | An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10 Affected: 10.3.0.0 before 10.3.1.1 |
| CVE-2021-37733 | 4.9 | Sep 7 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1,… Affected: 8.3.0.0 before 8.3.0.16; 8.5.0.0 before 8.5.0.11; 8.6.0.0 before 8.6.0.7; 8.7.0.0 before 8.7.1.1 |
| CVE-2023-22791 | 4.8 | May 8 | Aruba InstantOS and ArubaOS 10 Sensitive Information Disclosure Affected: 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22778 | 4.8 | Feb 28 | Authenticated Stored Cross-Site Scripting Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2026-23812 | 4.2 | Mar 4 | Security Boundary Bypass via Routing Node Impersonation Affected: 6.5.4.0 through 8.10.0.21; 8.11.0.0 through 8.12.0.6; 8.13.0.0 through 8.13.1.1; 10.3.0.0 through 10.4.1.10; 10.5.0.0 through 10.7.2.2; 10.8.0.0 |