Known vulnerabilities in SD-WAN - page 3

Vendor: Aruba Networks
Software: SD-WAN
Software CPE: cpe:2.3:h:aruba_networks:sd-wan:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 63
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SD-WAN SD-WAN is affected by 63 known vulnerabilities: 12 high, 3 medium, 48 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72666 - Insufficient Session Expiration
CVE-2023-22771		 CWE-613 Low
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU72657 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22765		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU72658 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22766		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU72659 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22767		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU72660 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22768		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU72661 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22769		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU72638 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22747		 CWE-78 High
No
No
 8.7.0.0-2.3.0.9 01.03.2023 SB2023030113
#VU68776 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-37911		 CWE-611 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68775 - Memory corruption
CVE-2022-37910		 CWE-119 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68774 - Exposure of sensitive information to an unauthorized actor
CVE-2022-37909		 CWE-200 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68772 - Resource Management Errors
CVE-2022-37907		 CWE-399 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68770 - Security Features
CVE-2022-37905		 CWE-254 Medium
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68769 - Security Features
CVE-2022-37904		 CWE-254 Medium
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68768 - Unrestricted Upload of File with Dangerous Type
CVE-2022-37903		 CWE-434 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68762 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-37898		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68763 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-37899		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68764 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-37900		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-37901		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68766 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-37902		 CWE-78 Low
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646
#VU68761 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-37897		 CWE-78 High
No
No
 8.7.0.0-2.3.0.7 26.10.2022 SB2022102646


Showing elements 41 - 60 out of 63