HPESBNW05136 rev.1 - HPE Networking Advance Notification of Security Advisory for September 22, 2026

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine - Information about the impacted software version will be provided when the PSA is published on September 22. - HPE Networking will not...

CVE-2020-7119

A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...

EUVD-2020-28253

Malware in sbrugna...

HPESBNW04237 rev.4 - HPE Aruba Analytics and Location Engine, Aruba Central On Prem (COP), and Aruba ClearPass Policy Manager, PwnKit (Polkit) Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine 2.2.0.1 and below Aruba ClearPass Policy Manager 6.10.3 and all previous versions Aruba Central On-Premises 2.5.x.x: 2.5.4.2 and below CVSS...

HPESBNW04186 rev.2 - HPE Aruba Analytics and Location Engine (ALE), Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine - Prior to 2.1.0.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

CVE-2020-7119

A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...

CVE-2020-7119

A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...

CVE-2020-7119: Undefined Security Weakness

A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user...

PT-2020-19385

Name of the Vulnerable Software and Affected Versions Aruba Analytics and Location Engine ALE versions 2.1.0.2 and earlier Description A vulnerability exists in the Aruba Analytics and Location Engine ALE web management interface that allows an already authenticated administrative user to...

HPESBNW04033 rev.3 - Aruba Analytics and Location Engine (ALE), Authenticated Arbitrary File Modification

Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Services Usage Licenses 2.1.0.2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7119 |...