No mitigation yet

Medium5.3Aruba

ArubaOS: unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

CVE-2024-25615

Medium5.5Aruba

ArubaOS: There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS.

There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the controller.

CVE-2024-25614

Low3.7Aruba

Aruba has identified certain configurations of ArubaOS that can

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.

CVE-2024-25616

High7.2Aruba

Vulnerabilities in the ClearPass Policy Manager web-based management interface

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVE-2024-26298

Medium4.8Aruba

vulnerability in the web-based management interface of ClearPass Policy Manager could

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

CVE-2024-26302

Medium6.6Aruba

vulnerability in the guest interface of ClearPass Policy Manager could

A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

CVE-2024-26300

Medium6.6Aruba

vulnerability in the web-based management interface of ClearPass Policy Manager could

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

CVE-2024-26299