Vulnérabilités connues pour Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-23819 | A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an… | 8.8 Élevée | 12 mai 2026 |
| CVE-2025-37179 | Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain… | 5.3 Moyenne | 13 janv. 2026 |
| CVE-2025-37178 | Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain… | 5.3 Moyenne | 13 janv. 2026 |
| CVE-2025-37177 | An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors… | 6.5 Moyenne | 13 janv. 2026 |
| CVE-2025-37176 | A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject… | 6.5 Moyenne | 13 janv. 2026 |
| CVE-2025-37175 | Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either… | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37174 | Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors… | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37173 | An improper input handling vulnerability exists in the web-based management interface of mobility conductors running… | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37172 | Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors… | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37171 | Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors… | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37170 | Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors… | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37169 | A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway | 7.2 Élevée | 13 janv. 2026 |
| CVE-2025-37168 | Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8… | 8.2 Élevée | 13 janv. 2026 |
| CVE-2025-37145 | Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8… | 4.9 Moyenne | 14 oct. 2025 |
| CVE-2025-37144 | Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8… | 4.9 Moyenne | 14 oct. 2025 |
| CVE-2025-37143 | An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8… | 4.9 Moyenne | 14 oct. 2025 |
| CVE-2025-37142 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor… | 4.9 Moyenne | 14 oct. 2025 |
| CVE-2025-37141 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor… | 4.9 Moyenne | 14 oct. 2025 |
| CVE-2025-37140 | Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor… | 4.9 Moyenne | 14 oct. 2025 |
| CVE-2025-37139 | A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot… | 6.0 Moyenne | 14 oct. 2025 |
| CVE-2025-37138 | An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8… | 6.2 Moyenne | 14 oct. 2025 |
| CVE-2025-37137 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8… | 6.5 Moyenne | 14 oct. 2025 |
| CVE-2025-37136 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8… | 6.5 Moyenne | 14 oct. 2025 |
| CVE-2025-37135 | Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8… | 6.5 Moyenne | 14 oct. 2025 |
| CVE-2025-37134 | An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor… | 7.2 Élevée | 14 oct. 2025 |
Autres produits Hewlett Packard Enterprise (HPE)
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18