CVE-2022-37925

CVE-2022-37925 is an XSS vulnerability in Aruba EdgeConnect Enterprise web-based management interface. The issue affects Aruba EdgeConnect Enterprise software versions ECOS 9.2.1.0 and below, ECOS 9.1.3.0 and below, ECOS 9.0.7.0 and below, and ECOS 8.3.7.1 and below. The root cause is a reflected...

CVE-2022-37925

A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim...

CVE-2022-37924

Aruba EdgeConnect Enterprise Software contains a command-line interface vulnerability (CVE-2022-37924) that allows remote authenticated users to execute arbitrary commands as root on the underlying OS, potentially leading to full system compromise. Affected versions include ECOS 9.2.1.0 and below...

CVE-2022-37924

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37924

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37923

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37923

The CVE-2022-37923 issue affects Aruba EdgeConnect Enterprise Software, specifically the EdgeConnect Enterprise command line interface. The vulnerability enables remote authenticated users to execute arbitrary commands with root privileges on the underlying OS, potentially resulting in complete s...

CVE-2022-37923

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37922

CVE-2022-37922 affects Aruba EdgeConnect Enterprise Software via the EdgeConnect CLI. The vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to complete system compromise. Affected versions include ECOS 9....

CVE-2022-37922

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37922

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37921

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37921

Aruba EdgeConnect Enterprise Software is affected by CVE-2022-37921. The vulnerability stems from the Aruba EdgeConnect Enterprise command line interface, allowing remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to full sys...

CVE-2022-37921

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37920

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37920

CVE-2022-37920 affects Aruba EdgeConnect Enterprise Software (ECOS) prior to 9.2.1.0, 9.1.3.0, 9.0.7.0, and 8.3.7.1. The vulnerability exists in the command line interface and allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially ...

CVE-2022-37920

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37919

A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based management interface to create a denial-of-service condition which prevents the appliance from properly responding to API requests in Aruba EdgeConnect...

CVE-2022-37919

A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based management interface to create a denial-of-service condition which prevents the appliance from properly responding to API requests in Aruba EdgeConnect...

CVE-2022-37919

The CVE describes an unauthenticated denial-of-service in Aruba EdgeConnect Enterprise API accessible via the web-based management interface. Affected Software: Aruba EdgeConnect Enterprise (ECOS) 9.2.1.0 and below, 9.1.3.0 and below, 9.0.7.0 and below, and 8.3.7.1 and below. Root cause: API/QoS ...