CVE-2023-4896

CVE-2023-4896 affects Aruba Networks’ AirWave Management Platform. An authenticated attacker can access sensitive information via the web-based management interface, potentially enabling lateral access to devices managed by AirWave. The available documents confirm the affected product and the dat...

HPESBNW04546 rev.3 - HPE Aruba AirWave Management Platform, Authenticated Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform - See vulnerability summary for affected versions Affected Products HPE Aruba Networking AirWave Management Platform 8.3.0.1 an...

Aruba Networks AirWave Management Platform Security Vulnerability

Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...

The vulnerability of the Aruba AirWave network management system arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Aruba AirWave network management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2015-2202

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS...

CVE-2015-2201

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Cross site request forgery (csrf)

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Design/Logic Flaw

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users...

Cross site scripting

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

Design/Logic Flaw

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS...

Aruba Networks Airwave Cross-Site Request Forgery Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

CVE-2015-1391

CVE-2015-1391 affects Aruba AirWave versions prior to 8.0.7. The issue is a bypass of CSRF protection, enabling potential unauthorized actions within the affected interface. NVD notes a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, no privileges required, and user interaction req...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism...

Aruba Networks Airwave Cross-Site Scripting Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator...

CVE-2015-1390

Aruba AirWave before 8.0.7 is affected by a Cross-Site Scripting (XSS) vulnerability in the administrator-facing web interface. The root cause is described as a lack of protection for the web page structure, enabling a remote attacker to perform client-side script injections through the admin UI....

PT-2023-10313 · Aruba · Aruba Airwave

Name of the Vulnerable Software and Affected Versions: Aruba AirWave versions 7.7.14.1 and earlier Aruba AirWave versions 8.0.6 and earlier Description: The issue allows remote OS command execution and file disclosure by administrative users through VisualRF. Recommendations: For Aruba AirWave...