Known vulnerabilities in ArubaOS-CX (AOS-CX) - page 2

Vendor: Aruba Networks
Software: ArubaOS-CX (AOS-CX)
Software CPE: cpe:2.3:h:aruba_networks:aos-cx:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 37
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ArubaOS-CX (AOS-CX) ArubaOS-CX (AOS-CX) is affected by 37 known vulnerabilities: 1 critical, 2 high, 15 medium, 19 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105877 - Security Features
CVE-2025-25040		 CWE-254 Low
No
No
 10.10.1150, 10.13.1080, 10.14.1040, 10.15.1005 19.03.2025 SB2025031962
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 10.10.1140, 10.13.1040, 10.14.1010 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 10.10.1131, 10.13.1031, 10.14.0007 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 10.10.1110, 10.12.1030, 10.13.1010 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU73905 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-1168		 CWE-78 Low
No
No
 10.06.0240, 10.10.1030, 10.11.0001 21.03.2023 SB2023032155
SB2023032427
#VU66929 - Improper Authentication
CVE-2022-23691		 CWE-287 Low
No
No
 10.06.0220, 10.08.1080, 10.09.1040, 10.10.1000 01.09.2022 SB2022090141
#VU66928 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23690		 CWE-200 Low
No
No
 10.06.0200, 10.08.1060, 10.09.1020, 10.10.0002 01.09.2022 SB2022090141
#VU66924 - Improper input validation
CVE-2022-23686		 CWE-20 Medium
No
No
 10.06.0200, 10.08.1060, 10.09.1020, 10.10.0002 01.09.2022 SB2022090141
#VU66925 - Improper input validation
CVE-2022-23687		 CWE-20 Medium
No
No
 10.06.0200, 10.08.1060, 10.09.1020, 10.10.0002 01.09.2022 SB2022090141
#VU66926 - Improper input validation
CVE-2022-23688		 CWE-20 Medium
No
No
 10.06.0200, 10.08.1060, 10.09.1020, 10.10.0002 01.09.2022 SB2022090141
#VU66927 - Improper input validation
CVE-2022-23689		 CWE-20 Medium
No
No
 10.06.0200, 10.08.1060, 10.09.1020, 10.10.0002 01.09.2022 SB2022090141
#VU66923 - Permissions, Privileges, and Access Controls
CVE-2022-23684		 CWE-264 Medium
No
No
 10.06.0210, 10.08.1070, 10.09.1030, 10.10.0002 01.09.2022 SB2022090141
#VU66898 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-23683		 CWE-78 Low
No
No
 10.06.0220, 10.08.1080, 10.09.1040, 10.10.1000 01.09.2022 SB2022090141
#VU66897 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-23682		 CWE-78 Low
No
No
 10.06.0220, 10.08.1080, 10.09.1040, 10.10.0002 01.09.2022 SB2022090141
#VU66896 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-23681		 CWE-78 Low
No
No
 10.06.0220, 10.08.1080, 10.09.1040, 10.10.0002 01.09.2022 SB2022090141
#VU66895 - Cross-Site Request Forgery (CSRF)
CVE-2022-23680		 CWE-352 Medium
No
No
 10.06.0210, 10.08.1070, 10.09.1030, 10.10.1000 01.09.2022 SB2022090141
#VU66894 - Cross-Site Request Forgery (CSRF)
CVE-2022-23679		 CWE-352 Medium
No
No
 10.06.0210, 10.08.1070, 10.09.1030, 10.10.1000 01.09.2022 SB2022090141


Showing elements 21 - 40 out of 37