Airwave Security Vulnerabilities and Issues — Airwave CVE List

Lucene search

HpAirwave

6 matches found

CVE•added 2018/08/06 8:29 p.m.•48 views

CVE-2016-8527

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is present in the VisualRF component of AirWave. By exploiting this vulnerability, an attacker who can trick a logged-in AirWave administrative user into clicking ...

6.1CVSS6AI score0.5332EPSS

CVE•added 2018/08/06 8:29 p.m.•44 views

CVE-2016-8526

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML parsers to access storage that exist on external systems. If an unprivileged user is permitted to control the contents of XML files, XXE can be used as an attac...

8.8CVSS7.1AI score0.05676EPSS

CVE•added 2023/09/05 6:15 p.m.•36 views

CVE-2015-2202

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS.

7.2CVSS7.1AI score0.00423EPSS

CVE•added 2023/09/05 6:15 p.m.•27 views

CVE-2015-2201

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.

7.2CVSS7.1AI score0.00446EPSS

CVE•added 2023/09/05 6:15 p.m.•26 views

CVE-2015-1390

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.