Known vulnerabilities in ArubaOS (AOS)
Vendor:
Aruba Networks
Software:
ArubaOS (AOS)
Software CPE:
cpe:2.3:o:aruba_networks:arubaos:*:*:*:*:*:*:*:*
Total vulnerabilities:
174
Public exploits:
6
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.7.1.0
10.7.1.1
8.10.0.18
8.10.0.17
8.10.0.16
8.10.0.9
8.10.0.8
10.4.1.8
10.4.1.7
10.4.1.6
10.4.1.3
10.4.1.2
8.10.0.21
8.10.0.20
8.13.1.1
10.4.1.10
10.7.2.2
8.13.0.1
8.13.0.0
10.7.2.0
8.10.0.19
8.12.0.6
8.13.1.0
10.4.1.9
10.7.2.1
10.3.1.4
10.5.0.0
10.6.0.2
10.6.0.1
8.10.0.15
8.10.0.13
8.12.0.3
8.12.0.1
10.4.1.5
10.7.0.0
8.10.0.11
8.10.0.12
8.11.2.2
8.12.0.0
10.4.1.1
10.5.1.1
10.6.0.0
8.10.0.10
8.11.2.1
10.4.1.0
10.5.1.0
10.6.0.3
10.4.1.4
8.10.0.14
8.12.0.2
10.4.0.3
10.5.0.1
8.6.0.21
8.10.0.7
8.11.1.1
10.4.0.2
8.11.1.0
10.4.0.1
10.4.0.0
10.3.1.3
10.3.1.2
8.11.0.1
8.11.0.0
8.10.0.6
8.10.0.5
8.9.0.3
8.9.0.2
8.9.0.1
8.9.0.0
8.8.0.3
8.8.0.2
8.8.0.1
8.8.0.0
8.7.1.11
8.7.0.0
8.6.0.20
8.6.0.19
8.5.0.14
8.4.0.6
8.3.0.18
8.3.0.17
8.5.0.0
8.4.0.5
8.4.0.4
8.4.0.3
8.4.0.2
8.4.0.1
8.4.0.0
8.3.0.0
8.2.2.0
8.2.1.1
8.2.1.0
8.2.0.2
8.2.0.1
8.2.0.0
8.0.1.1
8.0.0.0
8.10.0.4
8.10.0.3
8.10.0.2
8.10.0.1
10.3.0.1
8.10.0.0
8.7.1.10
8.7.1.9
8.7.1.8
8.7.1.7
8.7.1.6
8.7.1.5
8.6.0.18
8.6.0.17
8.6.0.16
8.6.0.15
8.6.0.14
8.6.0.13
8.6.0.12
8.6.0.11
8.6.0.10
8.6.0.0
6.5.4.23
6.5.4.22
6.5.4.21
10.3.1.1
10.3.1.0
10.3.0.0
8.7.1.4
8.7.1.3
8.7.1.2
8.7.1.1
8.7.1.0
8.6.0.9
8.6.0.8
8.6.0.7
8.6.0.6
8.6.0.5
8.6.0.4
8.6.0.3
8.6.0.2
8.6.0.1
8.5.0.13
8.5.0.12
8.5.0.11
8.5.0.10
8.5.0.9
8.5.0.8
8.5.0.7
8.5.0.6
8.5.0.5
8.5.0.4
8.5.0.3
8.5.0.2
8.5.0.1
8.3.0.16
8.3.0.15
8.3.0.14
8.3.0.13
8.3.0.12
8.3.0.11
8.3.0.10
8.3.0.9
8.3.0.8
8.3.0.7
8.3.0.6
8.3.0.5
8.3.0.4
8.3.0.3
8.3.0.2
8.3.0.1
6.5.4.20
6.5.4.19
6.5.4.18
6.5.4.17
6.5.4.16
6.5.4.15
6.5.4.14
6.5.4.13
6.5.4.12
6.5.4.11
6.5.4.10
6.5.4.9
6.5.4.8
6.5.4.7
6.5.4.6
6.5.4.5
6.5.4.4
6.5.4.3
6.4.4.25
6.4.4.24
6.4.4.23
6.4.4.22
6.4.4.21
6.4.4.20
6.4.4.19
6.4.4.18
6.4.4.17
6.4.4.16
6.1.4.2
6.1.2.3
6.2.0.2
6.2.0.1
6.2.0.0
6.4.2.1
6.3.11
6.4.2.5
6.4.2.4
6.4.2.3
6.3.1.13
6.3.0.0
6.2.3.8
6.2.3.7
6.2.3.6
6.2.3.5
6.2.3.4
6.2.3.3
6.2.3.2
6.2.3.1
6.1.3.9
6.1.3.8
6.1.3.7
6.1.3.6
6.1.3.5
6.1.3.4
6.1.3.3
6.1.3.2
6.1.3.1
6.1.3.0
8.1.0.4
8.1.0.3
8.1.0.2
8.1.0.1
8.1
8.0.1.0
8.0
6.5.4.2
6.5.4.1
6.5.4.0
6.5.3.3
6.5.3.2
6.5.3.1
6.5.3.0
6.5.0
6.4.4.15
6.4.4.14
6.4.4.13
6.4.4.12
6.4.4.11
6.4.4.10
6.4.4.9
6.4.4.8
6.4.4.7
6.4.4.6
6.4.4.5
6.4.4.4
6.4.4.3
6.4.4.2
6.4.4.1
6.3.1.24
6.3.1.23
6.3.1.22
6.3.1.19
6.3.1.18
6.3.1.15
6.3.1.14
6.3.1.12
6.3.1.11
6.3.1.10
6.3.1.9
6.3.1.8
6.3.1.7
6.3.1.6
6.3.1.5
6.3.1.4
6.3.1.3
6.3.1.2
6.3.1.1
6.3.1
6.3
Vulnerabilities (174)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121590 - Out-of-bounds read CVE-2025-37179 |
CWE-125 | Medium | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121589 - Out-of-bounds read CVE-2025-37178 |
CWE-125 | Medium | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37177 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121587 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37176 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121586 - Unrestricted Upload of File with Dangerous Type CVE-2025-37175 |
CWE-434 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121585 - Unrestricted Upload of File with Dangerous Type CVE-2025-37174 |
CWE-434 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121584 - Improper input validation CVE-2025-37173 |
CWE-20 | Low | 8.10.0.21, 8.13.1.1, 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121580 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37171 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121581 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37172 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121579 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37170 |
CWE-78 | Low | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU121578 - Stack-based buffer overflow CVE-2025-37169 |
CWE-121 | Low | 10.4.1.10, 10.7.2.2 | 15.01.2026 |
SB2026011551 |
||
| #VU121575 - Missing Authorization CVE-2025-37168 |
CWE-862 | Medium | 8.10.0.21, 8.13.1.1 | 15.01.2026 |
SB2026011551 |
||
| #VU118612 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-37162 |
CWE-78 | Low | 10.7.2.0 | 19.11.2025 |
SB2025111907 |
||
| #VU118611 - Improper input validation CVE-2025-37161 |
CWE-20 | Medium | 10.7.2.0 | 19.11.2025 |
SB2025111907 |
||
| #VU118121 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-37145 |
CWE-22 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118120 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-37144 |
CWE-22 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118119 - Improper Access Control CVE-2025-37143 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118118 - Improper Access Control CVE-2025-37142 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118117 - Improper Access Control CVE-2025-37141 |
CWE-284 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
||
| #VU118115 - Resource exhaustion CVE-2025-37139 |
CWE-400 | Low | 8.10.0.19, 8.12.0.6, 8.13.1.0, 10.4.1.9, 10.7.2.1 | 05.11.2025 |
SB2025110525 |
Showing elements 1 - 20 out of 174