Arubanetworks Airwave Glass
12 CVEs affecting Arubanetworks Airwave Glass. Latest disclosed: 2021-01-15. Critical: 5, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24640 | Critical | 9.8 | 2021-01-15 | There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glas… |
CVE-2020-24639 | Critical | 9.8 | 2021-01-15 | There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass… |
CVE-2020-7128 | Critical | 9.8 | 2020-11-04 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7127 | Critical | 9.8 | 2020-10-26 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7124 | Critical | 9.8 | 2020-10-26 | A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7125 | High | 8.8 | 2020-10-26 | A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-24641 | High | 7.5 | 2021-01-15 | In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited ca… |
CVE-2020-24638 | High | 7.2 | 2021-01-15 | Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin priv… |
CVE-2020-7129 | High | 7.2 | 2020-11-04 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-24632 | High | 7.2 | 2020-10-26 | A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-24631 | High | 7.2 | 2020-10-26 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-7126 | Medium | 5.8 | 2020-10-26 | A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |