Arubaos Cx

6 CVEs product

Monthly

CVE-2025-37160 MEDIUM This Month

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Arubaos Cx
NVD
CVSS 3.1
5.3
EPSS
0.1%
CVE-2025-37159 MEDIUM This Month

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Rated medium severity (CVSS 5.8), this vulnerability is low attack complexity. No vendor patch available.

Session Fixation Authentication Bypass Arubaos Cx
NVD
CVSS 3.1
5.8
EPSS
0.1%
CVE-2025-37158 MEDIUM This Month

A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerability is no authentication required. No vendor patch available.

Command Injection RCE Arubaos Cx
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2025-37157 MEDIUM This Month

A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerability is no authentication required. No vendor patch available.

Command Injection RCE Code Injection Arubaos Cx
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2025-37156 MEDIUM This Month

A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Arubaos Cx
NVD
CVSS 3.1
6.8
EPSS
0.1%
CVE-2025-37155 HIGH This Month

A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Arubaos Cx
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-37160
EPSS 0% CVSS 5.3
MEDIUM This Month

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Arubaos Cx
NVD
CVE-2025-37159
EPSS 0% CVSS 5.8
MEDIUM This Month

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Rated medium severity (CVSS 5.8), this vulnerability is low attack complexity. No vendor patch available.

Session Fixation Authentication Bypass Arubaos Cx
NVD
CVE-2025-37158
EPSS 0% CVSS 6.7
MEDIUM This Month

A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerability is no authentication required. No vendor patch available.

Command Injection RCE Arubaos Cx
NVD
CVE-2025-37157
EPSS 0% CVSS 6.7
MEDIUM This Month

A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerability is no authentication required. No vendor patch available.

Command Injection RCE Code Injection +1
NVD
CVE-2025-37156
EPSS 0% CVSS 6.8
MEDIUM This Month

A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Arubaos Cx
NVD
CVE-2025-37155
EPSS 0% CVSS 7.8
HIGH This Month

A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Arubaos Cx
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy