Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-16	CVE-2023-30507	Path Traversal vulnerability in Arubanetworks Edgeconnect Enterprise Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. network low complexity arubanetworks CWE-22	6.5
2023-05-16	CVE-2023-30508	Path Traversal vulnerability in Arubanetworks Edgeconnect Enterprise Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. network low complexity arubanetworks CWE-22	6.5
2023-05-16	CVE-2023-30509	Path Traversal vulnerability in Arubanetworks Edgeconnect Enterprise Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. network low complexity arubanetworks CWE-22	6.5
2023-05-16	CVE-2023-30510	Unspecified vulnerability in Arubanetworks Edgeconnect Enterprise A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. network low complexity arubanetworks	4.3
2022-12-12	CVE-2022-37925	Cross-site Scripting vulnerability in Arubanetworks Edgeconnect Enterprise A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. network low complexity arubanetworks CWE-79	6.1
2022-12-12	CVE-2022-37926	Cross-site Scripting vulnerability in Arubanetworks Edgeconnect Enterprise A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface by uploading a specially crafted file. network low complexity arubanetworks CWE-79	5.4
2022-12-12	CVE-2022-43518	Path Traversal vulnerability in Arubanetworks Edgeconnect Enterprise An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. network low complexity arubanetworks CWE-22	6.5
2022-12-12	CVE-2022-44532	Path Traversal vulnerability in Arubanetworks Edgeconnect Enterprise An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command line interface. network low complexity arubanetworks CWE-22	6.5
2020-12-11	CVE-2020-12149	OS Command Injection vulnerability in Arubanetworks Edgeconnect Enterprise The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. network low complexity arubanetworks CWE-78	6.8
2020-12-11	CVE-2020-12148	OS Command Injection vulnerability in Arubanetworks Edgeconnect Enterprise A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. network low complexity arubanetworks CWE-78	6.8