Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 716

Export CSV
CVE-2023-30506

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-22788

Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed
Vendors
Arubanetworks Hp
Products
Arubaos Instantos
CVE-2023-30504

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS 3.1 · 7.2 High EPSS 1.0% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30505

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS 3.1 · 7.2 High EPSS 1.0% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30509

Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30508

Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30501

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS 3.1 · 7.2 High EPSS 1.0% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30502

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30503

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS 3.1 · 7.2 High EPSS 1.0% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2023-30510

Authenticated Server-side Request Forgery in Aruba EdgeConnect Enterprise Web Management Interface

A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset of URLs which can result in the possible disclosure of data due to the network position of the Aruba EdgeConnect Enterprise instance.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise
CVE-2020-12149

OS Command Injection - Management File Upload

The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to: 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.

CVSS 3.1 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors
Arubanetworks Silver-peak
Products
Edgeconnect Enterprise Nx-10700 Nx-11700 and 19 more
CVE-2020-12148

OS Command Injection - nslookup API

A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could exploit this vulnerability to establish an interactive channel, effectively taking control of the target system. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to : 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.

CVSS 3.1 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Arubanetworks
Products
Edgeconnect Enterprise Nx-10700 Nx-11700 and 18 more
CVE-2023-35972

Authenticated Remote Command Execution in ArubaOS Web-based Management Interface

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to fully compromise the underlying operating system on the device running ArubaOS.

CVSS 3.1 · 7.2 High EPSS 1.6% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2023-35973

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2023-35974

Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2023-35975

Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2023-35976

Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2023-35977

Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2023-35979

Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface

There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in a Denial-of-Service (DoS) condition affecting the web-based management interface of the controller.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Arubaos Mc-va-10 Mc-va-1k and 11 more
CVE-2024-5486

Authenticated Sensitive Information Disclosure in ClearPass Policy Manager

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Arubanetworks
Products
Clearpass Policy Manager