Airwave Glass (Arubanetworks) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2021-01-15. Vendor: Arubanetworks.
CVEs of Airwave Glass
- CVE-2020-24640 - CVSS 9.8 (critical), 2021-01-15: There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave…
- CVE-2020-24639 - CVSS 9.8 (critical), 2021-01-15: There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass…
- CVE-2020-24638 - CVSS 7.2 (high), 2021-01-15: Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin…
- CVE-2020-24641 - CVSS 7.5 (high), 2021-01-15: In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited…
- CVE-2020-7128 - CVSS 9.8 (critical), 2020-11-04: A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-7129 - CVSS 7.2 (high), 2020-11-04: A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-7127 - CVSS 9.8 (critical), 2020-10-26: A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-24631 - CVSS 7.2 (high), 2020-10-26: A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-7125 - CVSS 8.8 (high), 2020-10-26: A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-7124 - CVSS 9.8 (critical), 2020-10-26: A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-24632 - CVSS 7.2 (high), 2020-10-26: A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
- CVE-2020-7126 - CVSS 5.8 (medium), 2020-10-26: A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
