Known vulnerabilities in ArubaOS (AOS) 8.6.0.2
Vendor:
Aruba Networks
Software:
ArubaOS (AOS)
Version:
8.6.0.2
Software CPE:
cpe:2.3:o:aruba_networks:arubaos:*:*:*:*:*:*:*:*
Total vulnerabilities:
95
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
10.7.1.0
10.7.1.1
8.10.0.18
8.10.0.17
8.10.0.16
8.10.0.9
8.10.0.8
10.4.1.8
10.4.1.7
10.4.1.6
10.4.1.3
10.4.1.2
8.10.0.21
8.10.0.20
8.13.1.1
10.4.1.10
10.7.2.2
8.13.0.1
8.13.0.0
10.7.2.0
8.10.0.19
8.12.0.6
8.13.1.0
10.4.1.9
10.7.2.1
10.3.1.4
10.5.0.0
10.6.0.2
10.6.0.1
8.10.0.15
8.10.0.13
8.12.0.3
8.12.0.1
10.4.1.5
10.7.0.0
8.10.0.11
8.10.0.12
8.11.2.2
8.12.0.0
10.4.1.1
10.5.1.1
10.6.0.0
8.10.0.10
8.11.2.1
10.4.1.0
10.5.1.0
10.6.0.3
10.4.1.4
8.10.0.14
8.12.0.2
10.4.0.3
10.5.0.1
8.6.0.21
8.10.0.7
8.11.1.1
10.4.0.2
8.11.1.0
10.4.0.1
10.4.0.0
10.3.1.3
10.3.1.2
8.11.0.1
8.11.0.0
8.10.0.6
8.10.0.5
8.9.0.3
8.9.0.2
8.9.0.1
8.9.0.0
8.8.0.3
8.8.0.2
8.8.0.1
8.8.0.0
8.7.1.11
8.7.0.0
8.6.0.20
8.6.0.19
8.5.0.14
8.4.0.6
8.3.0.18
8.3.0.17
8.5.0.0
8.4.0.5
8.4.0.4
8.4.0.3
8.4.0.2
8.4.0.1
8.4.0.0
8.3.0.0
8.2.2.0
8.2.1.1
8.2.1.0
8.2.0.2
8.2.0.1
8.2.0.0
8.0.1.1
8.0.0.0
8.10.0.4
8.10.0.3
8.10.0.2
8.10.0.1
10.3.0.1
8.10.0.0
8.7.1.10
8.7.1.9
8.7.1.8
8.7.1.7
8.7.1.6
8.7.1.5
8.6.0.18
8.6.0.17
8.6.0.16
8.6.0.15
8.6.0.14
8.6.0.13
8.6.0.12
8.6.0.11
8.6.0.10
8.6.0.0
6.5.4.23
6.5.4.22
6.5.4.21
10.3.1.1
10.3.1.0
10.3.0.0
8.7.1.4
8.7.1.3
8.7.1.2
8.7.1.1
8.7.1.0
8.6.0.9
8.6.0.8
8.6.0.7
8.6.0.6
8.6.0.5
8.6.0.4
8.6.0.3
8.6.0.2
8.6.0.1
8.5.0.13
8.5.0.12
8.5.0.11
8.5.0.10
8.5.0.9
8.5.0.8
8.5.0.7
8.5.0.6
8.5.0.5
8.5.0.4
8.5.0.3
8.5.0.2
8.5.0.1
8.3.0.16
8.3.0.15
8.3.0.14
8.3.0.13
8.3.0.12
8.3.0.11
8.3.0.10
8.3.0.9
8.3.0.8
8.3.0.7
8.3.0.6
8.3.0.5
8.3.0.4
8.3.0.3
8.3.0.2
8.3.0.1
6.5.4.20
6.5.4.19
6.5.4.18
6.5.4.17
6.5.4.16
6.5.4.15
6.5.4.14
6.5.4.13
6.5.4.12
6.5.4.11
6.5.4.10
6.5.4.9
6.5.4.8
6.5.4.7
6.5.4.6
6.5.4.5
6.5.4.4
6.5.4.3
6.4.4.25
6.4.4.24
-
6.4.4.23
6.4.4.22
6.4.4.21
6.4.4.20
6.4.4.19
6.4.4.18
6.4.4.17
6.4.4.16
6.1.4.2
6.1.2.3
6.2.0.2
6.2.0.1
6.2.0.0
6.4.2.1
6.3.11
6.4.2.5
6.4.2.4
6.4.2.3
6.3.1.13
6.3.0.0
6.2.3.8
6.2.3.7
6.2.3.6
6.2.3.5
6.2.3.4
6.2.3.3
6.2.3.2
6.2.3.1
6.1.3.9
6.1.3.8
6.1.3.7
6.1.3.6
6.1.3.5
6.1.3.4
6.1.3.3
6.1.3.2
6.1.3.1
6.1.3.0
8.1.0.4
8.1.0.3
8.1.0.2
8.1.0.1
8.1
8.0.1.0
8.0
6.5.4.2
6.5.4.1
6.5.4.0
6.5.3.3
6.5.3.2
6.5.3.1
6.5.3.0
6.5.0
6.4.4.15
6.4.4.14
6.4.4.13
6.4.4.12
6.4.4.11
6.4.4.10
6.4.4.9
6.4.4.8
6.4.4.7
6.4.4.6
6.4.4.5
6.4.4.4
6.4.4.3
6.4.4.2
6.4.4.1
6.3.1.24
6.3.1.23
6.3.1.22
6.3.1.19
6.3.1.18
6.3.1.15
6.3.1.14
6.3.1.12
6.3.1.11
6.3.1.10
6.3.1.9
6.3.1.8
6.3.1.7
6.3.1.6
6.3.1.5
6.3.1.4
6.3.1.3
6.3.1.2
6.3.1.1
6.3.1
6.3
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121590 - Out-of-bounds read CVE-2025-37179 |
CWE-125 | Medium | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121589 - Out-of-bounds read CVE-2025-37178 |
CWE-125 | Medium | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37177 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121587 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37176 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121586 - Unrestricted Upload of File with Dangerous Type CVE-2025-37175 |
CWE-434 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121585 - Unrestricted Upload of File with Dangerous Type CVE-2025-37174 |
CWE-434 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121584 - Improper input validation CVE-2025-37173 |
CWE-20 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121580 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37171 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121581 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37172 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121579 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37170 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121575 - Missing Authorization CVE-2025-37168 |
CWE-862 | Medium | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU118116 - Improper Access Control CVE-2025-37140 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118115 - Resource exhaustion CVE-2025-37139 |
CWE-400 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118114 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37138 |
CWE-78 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118113 - Improper Access Control CVE-2025-37137 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118112 - Improper Access Control CVE-2025-37136 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118111 - Improper Access Control CVE-2025-37135 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118110 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37134 |
CWE-78 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118109 - Unrestricted Upload of File with Dangerous Type CVE-2025-37132 |
CWE-434 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118108 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37133 |
CWE-78 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
Showing elements 1 - 20 out of 95