CVE-2016-4401

Aruba ClearPass Policy Manager is affected by CVE-2016-4401. Affected versions are before 6.5.7 and 6.6.x before 6.6.2. The vulnerability allows attackers to obtain database credentials. No explicit root-cause, exploit details, or remediation steps are provided in the connected documents beyond t...

CVE-2018-16417

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

CVE-2018-16417

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

Command injection

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

CVE-2018-16417

According to ICSA-19-134-07, CVE-2018-16417 is associated with Siemens SCALANCE W1750D and represents an information exposure vulnerability. Affected product: SCALANCE W1750D with versions prior to 8.4.0.1. Mitigation: upgrade to 8.4.0.1 or later; apply access restrictions to the web interface an...

CVE-2018-16417

Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection...

CVE-2018-7081

CVE-2018-7081 affects ArubaOS network-listening components on certain Mobility Controllers. The issue enables remote code execution when an attacker can send specially-crafted IP traffic to the device via the PAPI protocol over UDP port 8211. If successful, this could crash a process or allow arb...

community.arubanetworks.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-951744 Security Researcher hezd Helped patch 15 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting community.arubanetworks.com website and its users. Following...

CVE-2019-5401

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields management URL, location, contact. But admin privileges are required to configure the...

Cross site scripting

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields management URL, location, contact. But admin privileges are required to configure the...

CVE-2019-5401

A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss injection by setting the attack vector in one of the switch persistent configuration fields management URL, location, contact. But admin privileges are required to configure the...

CVE-2019-5401

CVE-2019-5401 concerns HP 2910al-48G switches (firmware family W.15.14.0016) where an XSS vulnerability can be triggered by crafting the attack vector in switch persistent configuration fields (management URL, location, contact). The issue’s root cause is an input handling flaw that permits scrip...

Aruba Instant Web and Siemens SCALANCE W1750D Cross-Site Scripting

Binary data 720256.prm...

Aruba Instant Web and Siemens SCALANCE W1750D Information Exposure

Binary data 720253.prm...

Aruba Instant Web and Siemens SCALANCE W1750D Command Injection

Binary data 720252.prm...

Aruba Instant Web and Siemens SCALANCE W1750D Command Injection

Binary data 720255.prm...

The vulnerability of the microprogrammed logic controller SCALANCE’s software, related to information disclosure, allows a intruder to gain access to the memory dumps of processes that have completed their operations.

The vulnerability of the microprogrammed programmable logic controller SCALANCE relates to the disclosure of information during an emergency shutdown of the process through the Aruba Instant web interface. Exploiting this vulnerability could allow a perpetrator who has not undergone identity...

The vulnerability of the microprogrammed programmable logic controller SCALANCE, related to insufficient neutralization of special elements, allows a intruder to execute arbitrary system commands.

The vulnerability of the microprogrammed programmable logic controller SCALANCE is related to the insufficient neutralization of certain special elements. Exploiting this vulnerability could allow a intruder, who does not have access to the Aruba Instant web interface, to execute arbitrary system...

The vulnerability of the microprogrammed logic controller SCALANCE software, related to the disclosure of information that allows a intruder to obtain recently cached configuration commands.

The vulnerability of the microprogrammed programmable logic controller SCALANCE relates to the disclosure of information. Exploiting this vulnerability could allow an intruder, who has not undergone identity verification, to obtain recently cached configuration commands by accessing the Aruba...

CVE-2018-7064

A reflected cross-site scripting XSS vulnerability is present in an unauthenticated Aruba Instant web interface. An attacker could use this vulnerability to trick an IAP administrator into clicking a link which could then take administrative actions on the Instant cluster, or expose the session...