CVE-2021-25153

Aruba AirWave Management Platform is vulnerable to remote SQL injection in versions prior to 8.2.12.1 due to inadequate validation of externally-entered SQL statements. Exploitation allows access to data-sensitive information; CVSSv3.1 base score 8.1 ( HIGH ), with network access and low complexi...

CVE-2021-25153

A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

CVE-2021-25154

A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

CVE-2021-25154

CVE-2021-25154 affects Aruba AirWave Management Platform prior to 8.2.12.1. The vulnerability is a remote escalation of privilege. Multiple connected sources confirm Aruba has released patches addressing this issue, with fixes included in AirWave version 8.2.12.1. CVSS data (3.1) indicates high i...

CVE-2021-25151

Aruba AirWave Management Platform was affected by a remote insecure deserialization vulnerability in versions prior to 8.2.12.1. The issue allowed an attacker to execute malicious serialized content remotely, leading to remote code execution. Aruba released patches addressing this vulnerability, ...

CVE-2021-25151

A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

CVE-2021-25147

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

CVE-2021-25147

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

Authentication flaw

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

CVE-2021-25147

CVE-2021-25147 describes a remote authentication restriction bypass in Aruba AirWave Management Platform prior to version 8.2.12.1. Affected software: Aruba AirWave Management Platform (before 8.2.12.1). Root cause: an authentication mechanism bypass that allows network-authenticated access witho...

CVE-2021-25147

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A deserialization vulnerability exists in Aruba Networks AirWave...

安移通网络 AirWave Management Platform SQL注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A SQL injection vulnerability exists in Aruba AirWave Management...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML external entity injection vulnerability exists in Aruba Networ...

安移通网络 AirWave Management Platform SQL注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting, and historical data reporting. An SQL injection vulnerability exists in Aruba AirWave Management...

Aruba Networks AirWave Management Platform 授权问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting, and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...

HPESBNW04126 rev.2 - Aruba AirWave Management Platform, Multiple Vulnerabilities

Potential Security Impact: Remote: Escalation of Privilege, SQL Injection, URL Redirection, Unauthorized Access, Authentication Restriction Bypass, XML External Entity XXE, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform -...

Vulnerabilities fixed in Aruba AirWave Management Platform

Aruba Networks has fixed multiple vulnerabilities in AirWave Management Platform. The vulnerabilities allow a remote malicious remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges SQL...