Arubanetworks Security Vulnerabilities (CVEs)

Track 161 security vulnerabilities affecting Arubanetworks products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.

32 Critical
97 High
32 Medium
🔔 Get Alerts for Arubanetworks
CVE-2023-22747 9.8

CVE-2023-22747 allows unauthenticated attackers to execute arbitrary commands on Aruba access points by sending malicious packets to UDP port 8211. Th...

Mar 1, 2023
CVE-2023-22749 9.8

CVE-2023-22749 allows unauthenticated attackers to execute arbitrary commands on Aruba access points by sending malicious packets to the PAPI UDP port...

Mar 1, 2023
CVE-2023-22751 9.8

CVE-2023-22751 is a critical stack-based buffer overflow vulnerability in Aruba Networks' PAPI protocol that allows unauthenticated attackers to execu...

Mar 1, 2023
CVE-2023-22753 8.1

CVE-2023-22753 is a critical buffer overflow vulnerability in Aruba networking devices that allows unauthenticated attackers to execute arbitrary code...

Mar 1, 2023
CVE-2023-22755 8.1

This CVE describes buffer overflow vulnerabilities in Aruba networking devices that allow unauthenticated attackers to execute arbitrary code with pri...

Mar 1, 2023
CVE-2022-23669 8.8

CVE-2022-23669 is a remote authorization bypass vulnerability in Aruba ClearPass Policy Manager that allows attackers to bypass authentication mechani...

May 17, 2022
CVE-2022-23672 7.2

This CVE describes an authenticated remote command injection vulnerability in Aruba ClearPass Policy Manager. Attackers with valid credentials can exe...

May 17, 2022
CVE-2022-23658 10.0

CVE-2022-23658 is a critical remote authentication bypass vulnerability in Aruba ClearPass Policy Manager that allows attackers to bypass authenticati...

May 16, 2022
CVE-2022-23660 10.0

This CVE describes a remote authentication bypass vulnerability in Aruba ClearPass Policy Manager that allows attackers to bypass authentication mecha...

May 16, 2022
CVE-2022-23662 9.1

This CVE describes an authenticated remote command injection vulnerability in Aruba ClearPass Policy Manager. An attacker with valid credentials can e...

May 16, 2022
CVE-2022-23664 9.1

This CVE describes an authenticated remote command injection vulnerability in Aruba ClearPass Policy Manager. Attackers with valid credentials can exe...

May 16, 2022
CVE-2022-23666 9.1

This CVE describes an authenticated remote command injection vulnerability in Aruba ClearPass Policy Manager. Attackers with valid credentials can exe...

May 16, 2022
CVE-2022-23677 8.1

This CVE allows remote attackers to execute arbitrary code on affected ArubaOS-Switch devices, potentially leading to complete system compromise. It a...

May 10, 2022
CVE-2021-40993 8.1

This CVE describes a remote SQL injection vulnerability in Aruba ClearPass Policy Manager that allows attackers to execute arbitrary SQL commands on a...

Oct 15, 2021
CVE-2021-40996 9.8

A remote authentication bypass vulnerability in Aruba ClearPass Policy Manager allows attackers to bypass authentication mechanisms and gain unauthori...

Oct 15, 2021
CVE-2021-40998 7.2

This CVE describes a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager. Attackers can execute arbitrary commands on a...

Oct 15, 2021
CVE-2021-40988 7.2

This CVE describes a remote directory traversal vulnerability in Aruba ClearPass Policy Manager that allows attackers to access files outside the inte...

Oct 15, 2021
CVE-2021-40992 7.2

A remote SQL injection vulnerability in Aruba ClearPass Policy Manager allows attackers to execute arbitrary SQL commands via crafted requests. This a...

Oct 15, 2021
CVE-2021-37738 7.5

CVE-2021-37738 is an information disclosure vulnerability in Aruba ClearPass Policy Manager that allows remote attackers to access sensitive informati...

Oct 15, 2021
CVE-2021-40986 7.2

This CVE describes a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager. Attackers can execute arbitrary commands on a...

Oct 15, 2021
CVE-2021-37736 9.8

This CVE describes a remote authentication bypass vulnerability in Aruba ClearPass Policy Manager that allows attackers to bypass authentication mecha...

Oct 15, 2021
CVE-2021-40999 7.2

This CVE allows remote attackers to execute arbitrary commands on Aruba ClearPass Policy Manager systems without authentication. It affects ClearPass ...

Oct 15, 2021
CVE-2021-37732 7.2

This CVE allows remote attackers to execute arbitrary commands on affected HPE Aruba Instant Access Points (IAPs) without authentication. The vulnerab...

Oct 12, 2021
CVE-2021-37730 7.2

This CVE allows remote attackers to execute arbitrary commands on affected HPE Aruba Instant Access Points (IAPs) without authentication. The vulnerab...

Oct 12, 2021
CVE-2021-37726 9.8

A remote buffer overflow vulnerability in HPE Aruba Instant Access Points (IAP) allows unauthenticated attackers to execute arbitrary code or cause de...

Oct 12, 2021
CVE-2021-37716 9.8

A remote buffer overflow vulnerability in Aruba SD-WAN Software and Gateways allows attackers to execute arbitrary code or cause denial of service. Af...

Sep 7, 2021
CVE-2021-37718 7.2

This CVE allows remote attackers to execute arbitrary commands on affected Aruba SD-WAN and gateway devices. The vulnerability stems from improper neu...

Sep 7, 2021
CVE-2021-37720 7.2

This CVE allows remote attackers to execute arbitrary commands on Aruba SD-WAN and gateway devices running vulnerable ArubaOS versions. Attackers can ...

Sep 7, 2021
CVE-2021-37722 7.2

This CVE allows remote attackers to execute arbitrary commands on Aruba SD-WAN and gateway devices through improper neutralization of special elements...

Sep 7, 2021
CVE-2021-37724 7.2

This CVE allows remote attackers to execute arbitrary commands on ArubaOS network devices without authentication. It affects ArubaOS versions prior to...

Sep 7, 2021
CVE-2021-29143 7.2

This CVE allows remote attackers to execute arbitrary commands on affected Aruba switches by exploiting improper neutralization of special elements in...

Jul 22, 2021
CVE-2021-34609 8.8

This CVE describes a remote SQL injection vulnerability in Aruba ClearPass Policy Manager that allows attackers to execute arbitrary SQL commands on t...

Jul 8, 2021
CVE-2021-34610 7.2

CVE-2021-34610 is a remote command execution vulnerability in Aruba ClearPass Policy Manager that allows attackers to execute arbitrary commands on af...

Jul 8, 2021
CVE-2021-29140 8.2

This CVE describes an XML External Entity (XXE) vulnerability in Aruba ClearPass Policy Manager that allows remote attackers to read arbitrary files o...

Apr 29, 2021
CVE-2021-29145 9.8

This CVE describes a critical Server-Side Request Forgery (SSRF) vulnerability in Aruba ClearPass Policy Manager that can lead to remote code executio...

Apr 29, 2021
CVE-2021-29147 8.8

CVE-2021-29147 is a remote command execution vulnerability in Aruba ClearPass Policy Manager that allows attackers to execute arbitrary commands on af...

Apr 29, 2021
CVE-2021-25167 8.8

This vulnerability allows remote attackers to execute arbitrary operating system commands on Aruba AirWave Management Platform systems without authent...

Apr 29, 2021
CVE-2021-25163 8.1

This CVE describes an XML External Entity (XXE) vulnerability in Aruba AirWave Management Platform that allows remote attackers to read arbitrary file...

Apr 29, 2021
CVE-2021-25152 7.2

This CVE describes a remote insecure deserialization vulnerability in Aruba AirWave Management Platform that allows attackers to execute arbitrary cod...

Apr 28, 2021
CVE-2021-25165 8.1

This CVE describes an XML External Entity (XXE) vulnerability in Aruba AirWave Management Platform that allows remote attackers to read arbitrary file...

Apr 28, 2021
CVE-2021-25151 8.8

This vulnerability allows remote attackers to execute arbitrary code on Aruba AirWave Management Platform systems by exploiting insecure deserializati...

Apr 28, 2021
CVE-2021-25154 7.5

A remote privilege escalation vulnerability in Aruba AirWave Management Platform allows attackers to gain elevated privileges on affected systems. Thi...

Apr 28, 2021
CVE-2020-7123 7.8

CVE-2020-7123 is a local privilege escalation vulnerability in Aruba ClearPass Policy Manager that allows authenticated local users to gain elevated p...

Apr 28, 2021
CVE-2019-5319 9.8

A remote buffer overflow vulnerability in Aruba Instant Access Points allows attackers to execute arbitrary code or cause denial of service. Affected ...

Mar 30, 2021
CVE-2021-25162 8.1

This vulnerability allows remote attackers to execute arbitrary commands on affected Aruba Instant Access Point devices without authentication. It aff...

Mar 30, 2021
CVE-2021-25150 8.8

This vulnerability allows remote attackers to execute arbitrary commands on affected Aruba Instant Access Points (IAPs) by exploiting improper neutral...

Mar 30, 2021
CVE-2021-25148 8.1

This CVE allows remote attackers to modify arbitrary files on affected Aruba Instant Access Points (IAPs) without authentication. The vulnerability af...

Mar 30, 2021
CVE-2021-25149 9.8

A remote buffer overflow vulnerability in Aruba Instant Access Points allows attackers to execute arbitrary code or cause denial of service by sending...

Mar 30, 2021
CVE-2021-25144 8.8

A remote buffer overflow vulnerability in Aruba Instant Access Points allows attackers to execute arbitrary code or cause denial of service. This affe...

Mar 29, 2021
CVE-2020-24636 9.8

This vulnerability allows remote attackers to execute arbitrary commands on affected Aruba Instant Access Points (IAPs) without authentication. It aff...

Mar 29, 2021

Why Monitor Arubanetworks Security Vulnerabilities?

Real-time CVE tracking: Our automated system monitors 161+ known vulnerabilities affecting Arubanetworks products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.

Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Arubanetworks packages in under 60 seconds. No agents required - completely agentless scanning that works across Arubanetworks deployments.

Free vulnerability database: Access detailed information about every Arubanetworks CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.

🚀 Get Started in 60 Seconds

  • Register free account & add your servers
  • Run one-time scan or schedule automatic monitoring (every 1-24 hours)
  • Receive instant alerts when new Arubanetworks CVEs affect your systems
  • Access dashboard with severity breakdown & fix instructions
Start Monitoring Arubanetworks CVEs Free