Vulnerabilities > HP > Airwave > 8.0.9.1

DATE CVE VULNERABILITY TITLE RISK
2018-08-06 CVE-2016-8527 Cross-site Scripting vulnerability in HP Airwave
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS).
network
hp CWE-79
4.3
2018-08-06 CVE-2016-8526 XXE vulnerability in HP Airwave
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE).
network
low complexity
hp CWE-611
4.0