CVE-2015-1390

Description

References

• arubanetworks.com/assets/alert/ARUBA-PSA-2015-005.txt · Vendor Advisory

Autres vulnérabilités de airwave

• CVE-2015-2202ÉLEVÉE 7.2Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS.
• CVE-2015-2201ÉLEVÉE 7.2Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
• CVE-2015-1391ÉLEVÉE 8.8Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
• CVE-2016-8527MOYENNE 6.1Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is p…
• CVE-2016-8526ÉLEVÉE 8.8Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML p…