Known vulnerabilities in CloudVision Portal
Vendor:
Arista Networks
Software:
CloudVision Portal
Software CPE:
cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:*
Website:
https://www.arista.com/en/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
1
Breakdown by Severity Chart
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU154097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-101155 |
CWE-22 | Low | 2025.3.4, 2026.1.3, 2026.2.1 | 12.10.2026 |
SB2026101251 |
||
| #VU154096 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-101154 |
CWE-22 | Low | 2025.3.4, 2026.1.3, 2026.2.1 | 12.10.2026 |
SB2026101251 |
||
| #VU109391 - Improper Privilege Management CVE-2024-8100 |
CWE-269 | Low | 2024.1.3, 2024.2.2, 2024.3.1, 2025.1.0 | 17.05.2025 |
SB2025051732 |
||
| #VU109390 - Improper Privilege Management CVE-2025-0505 |
CWE-269 | Medium | 2024.2.2, 2024.3.1 | 17.05.2025 |
SB2025051731 |
||
| #VU109389 - Improper Access Control CVE-2024-11186 |
CWE-284 | Medium | 2024.1.3, 2024.2.2, 2024.3.1, 2025.1.0 | 17.05.2025 |
SB2025051730 |
||
| #VU109300 - Information Exposure Through Log Files CVE-2022-29071 |
CWE-532 | Low | 2022.1.1, 2022.2.0 | 17.05.2025 |
SB2022072657 |
||
| #VU109299 - Improper Access Control CVE-2023-24546 |
CWE-284 | High | 2022.1.2, 2022.2.2, 2022.3.1 | 17.05.2025 |
SB2023030351 |
||
| #VU109288 - Improper Access Control CVE-2020-24333 |
CWE-284 | Medium | 2020.1.2 | 17.05.2025 |
SB2020090940 |
||
| #VU109287 - Information Exposure Through Log Files CVE-2020-13881 |
CWE-532 | Medium | 2020.1.2 | 17.05.2025 |
SB2020061082 SB2020090939 SB2020092119 |
||
| #VU109286 - Improper Access Control CVE-2019-18181 |
CWE-284 | Medium | 2019.1.0 | 17.05.2025 |
SB2019120541 |
||
| #VU109284 - Information Exposure Through Log Files CVE-2019-18615 |
CWE-532 | Low | 2019.1.0 | 17.05.2025 |
SB2019120540 |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | - | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 339 more |