5.8
Moyenne
CVE-2025-37159 A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an…
Description
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking AOS-CX 10.16 | 10.16.0000 → 10.16.1000 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.15 | 10.15.0000 → 10.15.1020 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.14 | 10.14.0000 → 10.14.1050 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.13 | 10.13.0000 → 10.13.1090 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.10 | 10.10.0000 → 10.10.1160 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking AOS-CX
Les 5 CVE de HPE Aruba Networking AOS-CX →
CVE-2025-37160
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote…
5.3
Moyenne
CVE-2025-37158
A command injection vulnerability exists in the AOS-CX Operating System
6.7
Moyenne
CVE-2025-37156
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software
6.8
Moyenne
CVE-2025-37155
A vulnerability in the SSH restricted shell interface of the network management services allows improper access…
7.8
Élevée