Skip to content
fr Sign in
Not rated

CVE-2021-26965 A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior…

Description

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database.

Affected products and versions

Product Affected versions Fixed in
Aruba AirWave Management Platform Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Aruba AirWave Management Platform

The 27 CVEs of Aruba AirWave Management Platform →
CVE-2022-37918 Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack… 8.1 High CVE-2022-37917 Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack… 8.1 High CVE-2022-37916 Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack… 8.1 High CVE-2021-37715 A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s):… Not rated
Track this CVE