AR
Product
Arubaos
233
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 121Medium 56Low 4
Watch
Add Arubaos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-25616 | 3.7 | Mar 5 | Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0 |
| CVE-2026-23811 | 3.1 | Mar 4 | Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation Affected: 6.5.4.0 through 8.10.0.21; 8.11.0.0 through 8.12.0.6; 8.13.0.0 through 8.13.1.1; 10.3.0.0 through 10.4.1.10; 10.5.0.0 through 10.7.2.2; 10.8.0.0 |
| CVE-2026-23810 | 3.1 | Mar 4 | Cross-BSSID GTK Re-encryption and Traffic Injection Affected: 6.5.4.0 through 8.10.0.21; 8.11.0.0 through 8.12.0.6; 8.13.0.0 through 8.13.1.1; 10.3.0.0 through 10.4.1.10; 10.5.0.0 through 10.7.2.2; 10.8.0.0 |
| CVE-2023-22771 | 2.4 | Mar 1 | An insufficient session expiration vulnerability exists in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
Showing 4
