Known vulnerabilities in Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-27084 | A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote… | 5.4 Medium | Apr 8, 2025 |
| CVE-2025-27085 | Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility… | 4.9 Medium | Apr 8, 2025 |
| CVE-2025-27083 | Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based… | 7.2 High | Apr 8, 2025 |
| CVE-2025-27082 | Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8… | 7.2 High | Apr 8, 2025 |
| CVE-2025-23052 | Authenticated command injection vulnerability in the command line interface of a network management service | 7.2 High | Jan 14, 2025 |
| CVE-2025-23051 | An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and… | 7.2 High | Jan 14, 2025 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20