Aruba Instant (Arubanetworks) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 133 known versions, newest CVE from 2021-10-12. Vendor: Arubanetworks.
CVEs of Aruba Instant
- CVE-2021-37732 - CVSS 7.2 (high), 2021-10-12: A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below;…
- CVE-2021-37735 - CVSS 5.3 (medium), 2021-10-12: A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x:…
- CVE-2021-37734 - CVSS 6.5 (medium), 2021-10-12: A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant…
- CVE-2021-37730 - CVSS 7.2 (high), 2021-10-12: A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below;…
- CVE-2021-37727 - CVSS 7.2 (high), 2021-10-12: A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant…
- CVE-2021-37726 - CVSS 9.8 (critical), 2021-10-12: A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has…
- CVE-2016-2032 - CVSS 7.5 (high), 2020-01-31: A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called…
- CVE-2016-2031 - CVSS 9.8 (critical), 2020-01-31: Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of…
- CVE-2018-7064 - CVSS 6.1 (medium), 2019-05-10: A reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aruba Instant web interface. An attacker could use this vulnerability to…
- CVE-2018-7084 - CVSS 9.8 (critical), 2019-05-10: A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system…
- CVE-2018-7083 - CVSS 7.5 (high), 2019-05-10: If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it…
- CVE-2018-7082 - CVSS 7.2 (high), 2019-05-10: A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the…