Arubanetworks Airwave
36 CVEs affecting Arubanetworks Airwave. Latest disclosed: 2025-11-18. Critical: 1, High: 23.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-2031 | Critical | 9.8 | 2020-01-31 | Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of… |
CVE-2021-25167 | High | 8.8 | 2021-04-29 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for Air… |
CVE-2021-25166 | High | 8.8 | 2021-04-29 | A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for Air… |
CVE-2021-25151 | High | 8.8 | 2021-04-28 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches fo… |
CVE-2021-26961 | High | 8.8 | 2021-03-05 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A v… |
CVE-2021-26960 | High | 8.8 | 2021-03-05 | A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A v… |
CVE-2022-37918 | High | 8.1 | 2022-12-08 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulne… |
CVE-2022-37917 | High | 8.1 | 2022-12-08 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulne… |
CVE-2022-37916 | High | 8.1 | 2022-12-08 | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulne… |
CVE-2021-25163 | High | 8.1 | 2021-04-29 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for Air… |
CVE-2021-25165 | High | 8.1 | 2021-04-28 | A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for Air… |
CVE-2021-25153 | High | 8.1 | 2021-04-28 | A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave M… |
CVE-2021-25147 | High | 8.1 | 2021-04-28 | A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released p… |
CVE-2021-25154 | High | 7.5 | 2021-04-28 | A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for… |
CVE-2016-2032 | High | 7.5 | 2020-01-31 | A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ… |
CVE-2025-37163 | High | 7.2 | 2025-11-18 | A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker cou… |
CVE-2015-2202 | High | 7.2 | 2023-09-05 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS. |
CVE-2015-2201 | High | 7.2 | 2023-09-05 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users. |
CVE-2021-25152 | High | 7.2 | 2021-04-28 | A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches fo… |
CVE-2021-26963 | High | 7.2 | 2021-03-05 | A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabili… |