Vulnerabilities > Arubanetworks > High

DATE CVE VULNERABILITY TITLE RISK
2023-05-08 CVE-2023-22790 Command Injection vulnerability in multiple products
Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface.
network
low complexity
arubanetworks hp CWE-77
8.8
2023-03-22 CVE-2023-25590 Improper Privilege Management vulnerability in Arubanetworks Clearpass Policy Manager
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role.
local
low complexity
arubanetworks CWE-269
7.8
2023-03-22 CVE-2023-25594 Incorrect Authorization vulnerability in Arubanetworks Clearpass Policy Manager
A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance.
network
low complexity
arubanetworks CWE-863
8.8
2023-03-01 CVE-2023-22758 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22759 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22760 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22761 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22762 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22763 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
network
low complexity
arubanetworks CWE-77
7.2
2023-03-01 CVE-2023-22764 Command Injection vulnerability in Arubanetworks Arubaos and Sd-Wan
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
network
low complexity
arubanetworks CWE-77
7.2