Known vulnerabilities in Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-37160 | A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote… | 5.3 Medium | Nov 18, 2025 |
| CVE-2025-37159 | A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an… | 5.8 Medium | Nov 18, 2025 |
| CVE-2025-37158 | A command injection vulnerability exists in the AOS-CX Operating System | 6.7 Medium | Nov 18, 2025 |
| CVE-2025-37156 | A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software | 6.8 Medium | Nov 18, 2025 |
| CVE-2025-37155 | A vulnerability in the SSH restricted shell interface of the network management services allows improper access… | 7.8 High | Nov 18, 2025 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20