CVE-2023-4896

CVE-2023-4896 affects Aruba Networks’ AirWave Management Platform. An authenticated attacker can access sensitive information via the web-based management interface, potentially enabling lateral access to devices managed by AirWave. The available documents confirm the affected product and the dat...

Aruba Networks AirWave Management Platform Security Vulnerability

Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...

The vulnerability of the Aruba AirWave network management system arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Aruba AirWave network management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2015-2201

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

CVE-2015-2202

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS...

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Cross site scripting

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

Cross site request forgery (csrf)

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Design/Logic Flaw

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

Design/Logic Flaw

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS...

CVE-2015-2201

Aruba AirWave contains a vulnerability in VisualRF that permits remote OS command execution and file disclosure by administrative users in affected releases. Affected versions are Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7. The issue is triggered through VisualRF components and could lead...

CVE-2015-2202

Aruba AirWave is affected by CVE-2015-2202. Versions affected: Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7. The issue allows administrative users to escalate privileges to root on the underlying OS. The root cause is a privilege-escalation flaw within the AirWave software. Remediation: upg...

Aruba Networks Airwave Cross-Site Request Forgery Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

CVE-2015-2201

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

Aruba Networks Airwave Cross-Site Scripting Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Aruba Networks Airwave Operating System Command Injection Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 7.7.14.2, 8.x through 8.0.7. An attacker could exploit the vulnerability to remotely execute operating...

PT-2023-10314 · Aruba · Aruba Airwave

Name of the Vulnerable Software and Affected Versions: Aruba AirWave versions 7.7.14.1 and earlier Aruba AirWave versions 8.0.6 and earlier Description: The issue allows administrative users to escalate privileges to root on the underlying OS. Recommendations: For Aruba AirWave versions 7.7.14.1...