Known vulnerabilities in AirWave Management Platform - page 2

Vendor: Aruba Networks
Software: AirWave Management Platform
Software CPE: cpe:2.3:h:aruba_networks:airwave_management_platform:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 34
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AirWave Management Platform AirWave Management Platform is affected by 34 known vulnerabilities: 1 critical, 3 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 8.2.14.1 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 8.2.14.1 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU50923 - Command injection
CVE-2021-26971		 CWE-77 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50922 - Command injection
CVE-2021-26970		 CWE-77 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50920 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-26969		 CWE-611 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50919 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-26968		 CWE-79 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-26967		 CWE-79 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50917 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-26966		 CWE-89 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50916 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-26965		 CWE-89 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50915 - Improper Access Control
CVE-2021-26964		 CWE-284 Medium
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50914 - Command injection
CVE-2021-26963		 CWE-77 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50913 - Command injection
CVE-2021-26962		 CWE-77 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50912 - Cross-Site Request Forgery (CSRF)
CVE-2021-26961		 CWE-352 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413
#VU50911 - Cross-Site Request Forgery (CSRF)
CVE-2021-26960		 CWE-352 Low
No
No
 8.2.12.0 24.02.2021 SB2021022413


Showing elements 21 - 40 out of 34