5.3
Moyenne
CVE-2025-37160 A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote…
Description
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking AOS-CX 10.16 | 10.16.0000 → 10.16.1000 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.15 | 10.15.0000 → 10.15.1020 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.14 | 10.14.0000 → 10.14.1050 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.13 | 10.13.0000 → 10.13.1090 | Pas de correctif indiqué |
| HPE Aruba Networking AOS-CX 10.10 | 10.10.0000 → 10.10.1160 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking AOS-CX
Les 5 CVE de HPE Aruba Networking AOS-CX →
CVE-2025-37159
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an…
5.8
Moyenne
CVE-2025-37158
A command injection vulnerability exists in the AOS-CX Operating System
6.7
Moyenne
CVE-2025-37156
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software
6.8
Moyenne
CVE-2025-37155
A vulnerability in the SSH restricted shell interface of the network management services allows improper access…
7.8
Élevée