Non notée
CVE-2021-26965 A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior…
Description
A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aruba AirWave Management Platform | Versions non publiées |
Références
- www.arubanetworks.com www.arubanetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Aruba AirWave Management Platform
Les 27 CVE de Aruba AirWave Management Platform →
CVE-2022-37918
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack…
8.1
Élevée
CVE-2022-37917
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack…
8.1
Élevée
CVE-2022-37916
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack…
8.1
Élevée
CVE-2021-37715
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s):…
Non notée