Hpe Aruba Networking Aos Cx
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_aos-cx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Hpe Aruba Networking Aos Cx (a5041cb0-6e9c-5c70-a503-e88175d83a6b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-37160 |
vulnerable | 2026-06-08 07:21:02.302322 |
Authenticated Broken Access Control (BAC) in REST API Configuration Service
MEDIUM (5.3)
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Published: 2025-11-18T18:54:09.908Z
Updated: 2025-11-18T20:56:20.675Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37159 |
vulnerable | 2026-06-08 07:21:02.301806 |
Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software
MEDIUM (5.8)
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.
Published: 2025-11-18T18:52:46.501Z
Updated: 2026-02-26T16:21:08.333Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37158 |
vulnerable | 2026-06-08 07:21:02.301391 |
Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX
MEDIUM (6.7)
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
Published: 2025-11-18T18:51:28.623Z
Updated: 2026-02-26T16:21:09.018Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37156 |
vulnerable | 2026-06-08 07:21:02.298873 |
ArubaOS-CX Platform-Level Denial-of-Service Vulnerability
MEDIUM (6.8)
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.
Published: 2025-11-18T18:46:10.640Z
Updated: 2025-11-18T20:28:30.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37155 |
vulnerable | 2026-06-08 07:21:02.297708 |
Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface
HIGH (7.8)
A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. If successfully exploited, this vulnerability could allow an attacker with read-only privileges to gain administrator access on the affected system.
Published: 2025-11-18T18:40:40.560Z
Updated: 2026-02-26T16:21:10.275Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.