Hpe Aruba Networking Aos
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_aos:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Hpe Aruba Networking Aos (b478e13c-fdd3-52eb-9310-fc815ebab46c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27085 |
vulnerable | 2026-06-08 07:14:54.118298 |
Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
MEDIUM (4.9)
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.
Published: 2025-04-08T16:29:25.829Z
Updated: 2025-04-09T17:45:48.190Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27084 |
vulnerable | 2026-06-08 07:14:54.117929 |
Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface
MEDIUM (5.4)
A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the context of the affected interface.
Published: 2025-04-08T16:32:46.764Z
Updated: 2025-04-09T17:44:59.609Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27083 |
vulnerable | 2026-06-08 07:14:54.117320 |
Authenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
HIGH (7.2)
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Published: 2025-04-08T16:26:50.920Z
Updated: 2025-04-09T17:44:13.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27082 |
vulnerable | 2026-06-08 07:14:54.115704 |
Authenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
HIGH (7.2)
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying host operating system.
Published: 2025-04-08T16:22:50.625Z
Updated: 2026-02-26T18:28:37.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23052 |
vulnerable | 2026-06-08 07:10:55.138235 |
Authenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI Interface
HIGH (7.2)
Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Published: 2025-01-14T17:38:43.844Z
Updated: 2025-01-23T21:14:36.522Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23051 |
vulnerable | 2026-06-08 07:10:55.137765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.