Hp Airwave — known CVE vulnerabilities

Every CVE whose affected-product data names Hp Airwave, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2015-1391 — CVSS 8.8 (high): Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
• CVE-2016-8526 — CVSS 8.8 (high): Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML…
• CVE-2015-2201 — CVSS 7.2 (high): Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
• CVE-2015-2202 — CVSS 7.2 (high): Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS.
• CVE-2015-1390 — CVSS 6.1 (medium): Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
• CVE-2016-8527 — CVSS 6.1 (medium): Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is…