Not rated
CVE-2021-26965 A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior…
Description
A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba AirWave Management Platform | Versions not published |
Other CVEs of Aruba AirWave Management Platform
The 27 CVEs of Aruba AirWave Management Platform →
CVE-2022-37918
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack…
8.1
High
CVE-2022-37917
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack…
8.1
High
CVE-2022-37916
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack…
8.1
High
CVE-2021-37715
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s):…
Not rated