MediumCVSS 6.1
EPSS 0.42%
Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
Product
HP Inc airwave vulnerabilities
6 published CVES affecting HP Inc airwave, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 0
- High
- 4
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest HP Inc airwave CVEs
Newest publication first
-
-
HighCVSS 8.8 EPSS 0.38%
Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
-
HighCVSS 7.2 EPSS 1.2%
Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
-
HighCVSS 7.2 EPSS 0.85%
Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS.
-
HighCVSS 8.8 EPSS 10.1% Public exploit
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML parsers to access storage that exist on external systems. If an unprivileged user is permitted to control the contents of XML files, XXE can...
-
MediumCVSS 6.1 EPSS 13.2% Public exploit
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is present in the VisualRF component of AirWave. By exploiting this vulnerability, an attacker who can trick a logged-in AirWave administrative...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.