SD
Product
Sd-wan
89
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 57Medium 15Low 1
Watch
Add Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22768 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22767 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22766 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22765 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22764 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22763 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22762 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22761 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22760 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22759 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22758 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37902 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37901 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37900 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37899 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37898 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37722 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37721 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37720 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37719 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37718 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6;… Affected: 2.2.0.0 before 2.2.0.6 |
| CVE-2021-37717 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6;… Affected: 2.2.0.0 before 2.2.0.6 |
| CVE-2020-24637 | 7.2 | Dec 11 | Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot Affected: before 2.1.0.2; 2.2.0.0 before 2.2.0.1 |
| CVE-2023-22777 | 6.5 | Mar 1 | An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22775 | 6.5 | Mar 1 | A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22774 | 6.5 | Mar 1 | Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22773 | 6.5 | Mar 1 | Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22772 | 6.5 | Mar 1 | An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37910 | 6.5 | Dec 12 | A buffer overflow vulnerability exists in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37908 | 6.5 | Dec 12 | An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37729 | 6.5 | Sep 7 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3,… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37731 | 6.2 | Sep 7 | A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1,… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2022-37911 | 5.5 | Dec 12 | Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2026-44873 | 5.4 | May 12 | Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2022-37909 | 5.3 | Dec 12 | Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2023-22776 | 4.9 | Mar 1 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2021-37733 | 4.9 | Sep 7 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1,… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2023-22778 | 4.8 | Mar 1 | A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22771 | 2.4 | Mar 1 | An insufficient session expiration vulnerability exists in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |