Approved changes feed: RSS · Atom

cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorHpe (8bc0c2a2-a9de-5f61-aa1f-0aa716beac6b)
ProductArubaos Cx (f42fa797-d709-5078-ad60-b705b4f21d79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-23817 vulnerable 2026-06-08 07:51:16.301347 Unauthenticated Open Redirect allows URL Manipulation in Web Interface
MEDIUM (6.5)
A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.
Published: 2026-03-11T03:14:18.534Z
Updated: 2026-03-11T15:45:06.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-37160 vulnerable 2026-06-08 07:21:02.302451 Authenticated Broken Access Control (BAC) in REST API Configuration Service
MEDIUM (5.3)
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Published: 2025-11-18T18:54:09.908Z
Updated: 2025-11-18T20:56:20.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-37159 vulnerable 2026-06-08 07:21:02.301956 Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software
MEDIUM (5.8)
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.
Published: 2025-11-18T18:52:46.501Z
Updated: 2026-02-26T16:21:08.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-37158 vulnerable 2026-06-08 07:21:02.301502 Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX
MEDIUM (6.7)
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
Published: 2025-11-18T18:51:28.623Z
Updated: 2026-02-26T16:21:09.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-37157 vulnerable 2026-06-08 07:21:02.300968 Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX
MEDIUM (6.7)
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
Published: 2025-11-18T18:48:58.009Z
Updated: 2026-02-26T16:21:09.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-37156 vulnerable 2026-06-08 07:21:02.299022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-37155 vulnerable 2026-06-08 07:21:02.298519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3718 vulnerable 2026-06-08 06:09:40.320548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1168 vulnerable 2026-06-08 05:52:34.019025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41003 vulnerable 2026-06-08 05:35:19.439095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41002 vulnerable 2026-06-08 05:35:19.437897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41001 vulnerable 2026-06-08 05:35:19.436806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41000 vulnerable 2026-06-08 05:35:19.424872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-20001 vulnerable 2026-06-08 04:47:18.805792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.