Known vulnerabilities in AirWave Management Platform

Vendor: Aruba Networks
Software: AirWave Management Platform
Software CPE: cpe:2.3:h:aruba_networks:airwave_management_platform:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 34
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AirWave Management Platform AirWave Management Platform is affected by 34 known vulnerabilities: 1 critical, 3 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118671 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-37163		 CWE-78 Low
No
No
 8.3.0.5 21.11.2025 SB2025112116
#VU107588 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4896		 CWE-200 Medium
No
No
 8.3.0.2 17.04.2025 SB20231017155
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747		 CWE-362 Low
No
No
 8.3.0.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 8.3.0.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 8.3.0.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 8.3.0.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 8.3.0.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU102729 - Heap-based Buffer Overflow
CVE-2024-12084		 CWE-122 Critical
Available
No
 8.3.0.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 25 more
#VU101879 - Argument Injection or Modification
CVE-2024-54008		 CWE-88 Low
No
No
 8.3.0.4 20.12.2024 SB2024122010
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 8.3.0.3 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU87188 - Inefficient Regular Expression Complexity
CVE-2022-25844		 CWE-1333 Medium
No
No
 8.3.0.4 07.03.2024 SB2024030721
SB2024040929
SB2024042411
and 10 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 8.3.0.3 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 8.3.0.3 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU69703 - Improper Access Control
CVE-2022-37916		 CWE-284 Medium
No
No
 8.2.15.1 29.11.2022 SB2022112962
#VU69704 - Improper Access Control
CVE-2022-37917		 CWE-284 Medium
No
No
 8.2.15.1 29.11.2022 SB2022112962
#VU69705 - Improper Access Control
CVE-2022-37918		 CWE-284 Medium
No
No
 8.2.15.1 29.11.2022 SB2022112962
#VU60739 - Integer overflow
CVE-2022-25315		 CWE-190 High
No
No
 8.2.14.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314		 CWE-190 Medium
No
No
 8.2.14.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313		 CWE-121 High
No
No
 8.2.14.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 8.2.14.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more


Showing elements 1 - 20 out of 34