CVE-2021-26963

CVE-2021-26963 affects Aruba AirWave Management Platform. A vulnerability in the AirWave CLI allows remote authenticated users to run arbitrary commands on the underlying host, enabling root-level execution and potential full system compromise. Affected version: prior to 8.2.12.0. There are no ex...

CVE-2021-26964

CVE-2021-26964 affects Aruba AirWave Management Platform prior to v8.2.12.0. The vulnerability is an improper access control issue in the web-based management interface that could allow an authenticated, lower-privileged user to access and modify devices and management user details, potentially e...

CVE-2021-26964

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an authenticated remote attacker to improperly access and modify devices and manageme...

CVE-2021-26960

The vulnerability CVE-2021-26960 affects Aruba AirWave Management Platform web interface prior to version 8.2.12.0. It is a CSRF flaw that could allow an unauthenticated attacker to cause actions with the privileges of a target user when a user is tricked into clicking a malicious link. Impact is...

CVE-2021-26960

A remote unauthenticated cross-site request forgery csrf vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a...

CVE-2021-26962

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could...

CVE-2021-26962

Aruba AirWave Management Platform CLI vulnerability (CVE-2021-26962) affects versions prior to 8.2.12.0. A remote authenticated user can exploit the AirWave CLI to execute arbitrary commands on the underlying host as root, leading to full system compromise. Impact and exploitability are consisten...

CVE-2021-26961

The vulnerability CVE-2021-26961 affects Aruba AirWave Management Platform prior to 8.2.12.0. A CSRF condition exists in the AirWave web-based management interface that could allow an unauthenticated attacker to induce actions with the privileges of a targeted, already-authenticated user. Exploit...

CVE-2021-26961

A remote unauthenticated cross-site request forgery csrf vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a...

Aruba AirWave Management Platform 命令注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the web management...

Aruba Networks AirWave Management Platform SQL注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An SQL injection vulnerability exists in the API of Aruba Networks...

Aruba AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML External Entity Injection XXE vulnerability exists in the web...

Aruba AirWave Management Platform 命令注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the CLI of Aruba Networks...

Aruba Networks AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the web management...

Aruba AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the CLI of Aruba Networks...

Aruba AirWave Management Platform 跨站请求伪造漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A cross-site request forgery vulnerability exists in the web manageme...

Aruba AirWave Management Platform 跨站脚本漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A reflective cross-site scripting vulnerability exists in the web...

Aruba AirWave Management Platform 跨站脚本漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A stored cross-site scripting vulnerability exists in the web...

Aruba Networks AirWave Management Platform 跨站请求伪造漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A cross-site request forgery vulnerability exists in the web manageme...

Aruba AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An improper access control vulnerability exists in the web management...