Login Request a demo
SD
Product
Sd-wan
by Arubanetworks · last CVE May 12, 2026
89
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities89In the news1Timeline
Severity mix
Critical 16High 57Medium 15Low 1
Severity
All severities89Critical16High57Medium15Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sd-wan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22777
6.5
1%
Mar 1
An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
CVE-2023-22775
6.5
1%
Mar 1
A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
CVE-2023-22774
6.5
1%
Mar 1
Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
CVE-2023-22773
6.5
1%
Mar 1
Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
CVE-2023-22772
6.5
1%
Mar 1
An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
CVE-2022-37910
6.5
1%
Dec 12
A buffer overflow vulnerability exists in the ArubaOS command line interface
Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7
CVE-2022-37908
6.5
0%
Dec 12
An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers
Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7
CVE-2021-37729
6.5
1%
Sep 7
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3,…
Affected: 2.2.0.0 before 2.2.0.4
CVE-2021-37731
6.2
0%
Sep 7
A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1,…
Affected: 2.2.0.0 before 2.2.0.4
CVE-2022-37911
5.5
1%
Dec 12
Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS
Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7
CVE-2026-44873
5.4
0%
May 12
Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System
Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9
CVE-2022-37909
5.3
0%
Dec 12
Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs
Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7
CVE-2023-22776
4.9
1%
Mar 1
An authenticated path traversal vulnerability exists in the ArubaOS command line interface
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
CVE-2021-37733
4.9
1%
Sep 7
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1,…
Affected: 2.2.0.0 before 2.2.0.4
CVE-2023-22778
4.8
0%
Mar 1
A vulnerability in the ArubaOS web management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the…
Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8
Showing 15