Aruba records
6 published records for vendor aruba.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 16.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2007-0931No exploit | Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent Omalcatel-lucent · omniaccess wireless | High7.5 | — | 6.0% | Feb 14, 2007 |
31Monitor | CVE-2007-0932No exploit | The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implemealcatel-lucent · omniaccess wireless · CWE-264 | High7.5 | — | 2.3% | Feb 14, 2007 |
30Monitor | CVE-2023-44983No exploit | WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposurearuba · aruba hispeed cache · CWE-200 | High7.5 | — | 0.5% | Dec 19, 2023 |
26Monitor | CVE-2021-34618No exploit | A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instantaruba · aruba instant | Medium6.5 | — | 0.4% | Jul 19, 2021 |
24Monitor | CVE-2021-34617No exploit | A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instaruba · aruba instant · CWE-79 | Medium6.1 | — | 0.5% | Jul 19, 2021 |
17Monitor | CVE-2007-4023No exploit | Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and eaaruba · mobility controller | Medium4.3 | — | 1.4% | Jul 26, 2007 |
- CVE-2007-093132Monitor
Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent Om
HighCVSS 7.5No exploitEPSS 6%alcatel-lucent · omniaccess wirelessFeb 14, 2007
- CVE-2007-093231Monitor
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly impleme
HighCVSS 7.5No exploitEPSS 2%alcatel-lucent · omniaccess wirelessFeb 14, 2007
- CVE-2023-4498330Monitor
WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 0%aruba · aruba hispeed cacheDec 19, 2023
- CVE-2021-3461826Monitor
A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant
MediumCVSS 6.5No exploitEPSS 0%aruba · aruba instantJul 19, 2021
- CVE-2021-3461724Monitor
A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Inst
MediumCVSS 6.1No exploitEPSS 0%aruba · aruba instantJul 19, 2021
- CVE-2007-402317Monitor
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and ea
MediumCVSS 4.3No exploitEPSS 1%aruba · mobility controllerJul 26, 2007