Arista Edge Threat Management (Arista Networks) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-01-10. Vendor: Arista Networks.

CVEs of Arista Edge Threat Management

• CVE-2024-9188 - CVSS 8.8 (high), 2025-01-10: Specially constructed queries cause cross platform scripting leaking administrator tokens
• CVE-2024-9134 - CVSS 8.3 (high), 2025-01-10: Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL…
• CVE-2024-47519 - CVSS 8.3 (high), 2025-01-10: Backup uploads to ETM subject to man-in-the-middle interception
• CVE-2024-9132 - CVSS 9.8 (critical), 2025-01-10: The administrator is able to configure an insecure captive portal script
• CVE-2024-47518 - CVSS 7.6 (high), 2025-01-10: Specially constructed queries targeting ETM could discover active remote access sessions
• CVE-2024-9131 - CVSS 7.2 (high), 2025-01-10: A user with administrator privileges can perform command injection
• CVE-2024-47520 - CVSS 7.6 (high), 2025-01-10: A user with advanced report application access rights can perform actions for which they are not authorized
• CVE-2024-9133 - CVSS 6.6 (medium), 2025-01-10: A user with administrator privileges is able to retrieve authentication tokens
• CVE-2024-47517 - CVSS 6.8 (medium), 2025-01-10: Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access