Hewlett Packard Enterprise (Hpe) HPE Aruba Networking AOS vulnerabilities
6 vulnerabilities
Known vulnerabilities in Hewlett Packard Enterprise (Hpe) HPE Aruba Networking AOS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-27084arubanetworksarubaos+1
EPSS score0.28%
A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the context of the affected interface.CVE-2025-27083arubanetworksarubaos+1EPSS score1.17%
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system.CVE-2025-27082arubanetworksarubaos+1EPSS score0.56%
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying host operating system.CVE-2025-27085arubanetworksarubaos+1EPSS score0.62%
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.CVE-2025-23052hewlett packard enterprise (hpe)hpe aruba networking aosEPSS score1.22%
Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.CVE-2025-23051hewlett packard enterprise (hpe)hpe aruba networking aosEPSS score0.71%
An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated user to leverage parameter injection to overwrite arbitrary system files.