CVE-2023-4896 Authenticated Disclosure of Sensitive Information in AirWave Management Platform

A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices...

HPESBNW04546 rev.3 - HPE Aruba AirWave Management Platform, Authenticated Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform - See vulnerability summary for affected versions Affected Products HPE Aruba Networking AirWave Management Platform 8.3.0.1 an...

Aruba Networks AirWave Management Platform Security Vulnerability

Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...

The vulnerability of the Aruba AirWave network management system arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Aruba AirWave network management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2015-2202

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS...

CVE-2015-2201

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Design/Logic Flaw

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

Cross site request forgery (csrf)

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Cross site scripting

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

Design/Logic Flaw

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS...

CVE-2015-1391

CVE-2015-1391 affects Aruba AirWave versions prior to 8.0.7. The issue is a bypass of CSRF protection, enabling potential unauthorized actions within the affected interface. NVD notes a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, no privileges required, and user interaction req...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Aruba Networks Airwave Cross-Site Request Forgery Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

Aruba Networks Airwave Cross-Site Scripting Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2015-1390

Aruba AirWave before 8.0.7 is affected by a Cross-Site Scripting (XSS) vulnerability in the administrator-facing web interface. The root cause is described as a lack of protection for the web page structure, enabling a remote attacker to perform client-side script injections through the admin UI....

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

Aruba Networks Airwave Operating System Command Injection Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 7.7.14.2, 8.x through 8.0.7. An attacker could exploit the vulnerability to remotely execute operating...