CVE-2021-26971

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...

CVE-2021-26969

A remote authenticated authenticated xml external entity xxe vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit...

CVE-2021-26970

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...

CVE-2021-26967

A remote reflected cross-site scripting xss vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against ...

CVE-2021-26967: Improper Neutralization of Input During Web Page Generation

A remote reflected cross-site scripting xss vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against ...

CVE-2021-26968: Improper Neutralization of Input During Web Page Generation

A remote authenticated stored cross-site scripting xss vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site...

PT-2021-17202

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote unauthenticated cross-site request forgery csrf vulnerability was discovered in the AirWave web-based management interface. This could allow an unauthenticated...

PT-2021-17205

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote authentication restriction bypass issue was discovered in the AirWave web-based management interface, allowing an authenticated remote attacker to improperly...

PT-2021-17211

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote authenticated arbitrary command execution issue was discovered in the AirWave web-based management interface, allowing remote authenticated users to run...

PT-2021-17201

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote unauthenticated cross-site request forgery csrf vulnerability was discovered in the AirWave web-based management interface. This could allow an unauthenticated...

PT-2021-17210

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote authenticated XML External Entity XXE issue was discovered in the web-based management interface of the platform. This is due to improper restrictions on XML...

PT-2021-17212

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote authenticated arbitrary command execution issue was discovered in the AirWave web-based management interface, allowing remote authenticated users to run...

PT-2021-17209

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote authenticated stored cross-site scripting XSS issue was found in the web-based management interface, allowing an authenticated remote attacker to conduct a...

PT-2021-17208

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.12.0 Description: A remote reflected cross-site scripting xss vulnerability was discovered in the web-based management interface of Aruba AirWave Management Platform. This vulnerability...

Cisco SD-WAN vManage SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper input validation of SQL queries to an affected system. An attacker cou...

Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an affected system. This vulnerability is due to insufficient access control for sensitive information that ...

Command injection

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26685

Aruba ClearPass Policy Manager contains a SQL injection vulnerability in the web-based management interface API that is exploitable by an authenticated remote attacker. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. Successful exploitation could allow an attacker to obtain and m...

PT-2021-17090

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager version 6.8.8-HF1 Aruba ClearPass Policy Manager version 6.7.14-HF1 Description A remote authenticated SQL Injection issue was discovered in the web-based...

CVE-2021-26684: Improper Neutralization of Special Elements used in an OS Command

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...