NotCVE - vendor:"Arubanetworks" product:"Edgeconnect Enterprise"

Page 5 of 41 results (0.009 seconds)

CVSS: 8.8EPSS: 0%CPEs: 16EXPL: 0

CVE-2022-43521

https://notcve.org/view.php?id=CVE-2022-43521

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the Aruba EdgeConnect Enterprise Orchestrator host in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned. Múltiples vulnerabilidades en la interfaz de administración basada en web de Aruba EdgeConnect Enterprise Orchestrator podrían permitir que un atacante remoto autenticado realice ataques de inyección SQL contra la instancia de Aruba EdgeConnect Enterprise Orchestrator. Un atacante podría aprovechar estas vulnerabilidades para obtener y modificar información confidencial en la base de datos subyacente, lo que podría comprometer completamente el host de Aruba EdgeConnect Enterprise Orchestrator en las versiones del software Aruba EdgeConnect Enterprise Orchestration: Aruba EdgeConnect Enterprise Orchestrator (local), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP y Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 y versiones anteriores, - Orchestrator 9.1.4.40436 y versiones anteriores, - Orchestrator 9.0.7.40110 y versiones anteriores, - Orchestrator 8.10.23.40015 y versiones anteriores: cualquier rama anterior de Orchestrator que no se mencione específicamente. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-021.txt • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 8.8EPSS: 0%CPEs: 16EXPL: 0

CVE-2022-43520

https://notcve.org/view.php?id=CVE-2022-43520

CVSS: 8.8EPSS: 0%CPEs: 16EXPL: 0

CVE-2022-43519

https://notcve.org/view.php?id=CVE-2022-43519

CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-44533

https://notcve.org/view.php?id=CVE-2022-44533

A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below. Una vulnerabilidad en la interfaz de administración web de Aruba EdgeConnect Enterprise permite a usuarios remotos autenticados ejecutar comandos arbitrarios en el host subyacente. Un exploit exitoso podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, lo que podría comprometer completamente el sistema en las versiones del software Aruba EdgeConnect Enterprise: ECOS 9.2.1.0 y anteriores; ECOS 9.1.3.0 y anteriores; ECOS 9.0.7.0 y anteriores; ECOS 8.3.7.1 y anteriores. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt •

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-44532

https://notcve.org/view.php?id=CVE-2022-44532

An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below. Existe una vulnerabilidad de path traversal autenticada en la interfaz de línea de comandos de Aruba EdgeConnect Enterprise. La explotación exitosa de esta vulnerabilidad da como resultado la capacidad de leer archivos arbitrarios en el sistema operativo subyacente, incluidos archivos confidenciales del sistema en las versiones del software Aruba EdgeConnect Enterprise: ECOS 9.2.1.0 y anteriores; ECOS 9.1.3.0 y anteriores; ECOS 9.0.7.0 y anteriores; ECOS 8.3.7.1 y anteriores. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

1...3 4 5 6 7