Aruba Networks vulnerabilities
We track 261 vulnerabilities in Aruba Networks products across 21 products. 261 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on September 22, 2026.
Latest Aruba Networks vulnerabilities
- 7.2 High severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlyi
- 7.2 High severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in a Command
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlyi
- 7.2 High severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlyi
- 7.2 High severity
Aruba CX 6200F Switch Series; Aruba 6300…: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating
- 7.8 High severity
Aruba CX 6200F Switch Series; Aruba 6300…: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete sw
- 7.8 High severity
Aruba CX 6200F Switch Series; Aruba 6300…: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete sw
- 8.8 High severity
Aruba CX 6200F Switch Series; Aruba 6300…: Cross-Site Request Forgery
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10
- 8.8 High severity
Aruba CX 6200F Switch Series; Aruba 6300…: Cross-Site Request Forgery
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches version(s): AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10
- 7.2 High severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 7.2 High severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 8.8 High severity
A remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager…
A remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security
- 7.2 High severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 9.1 Critical severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 9.1 Critical severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 9.1 Critical severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 9.1 Critical severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 9.1 Critical severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 9.1 Critical severity
Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address thi
- 8.1 High severity
ArubaOS-Switch Devices: Out-of-bounds Write
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xx
- 9.8 Critical severity
ArubaOS-Switch Devices: Out-of-bounds Write
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xx
- 9.8 Critical severity
Apache Struts Remote Code Execution Exploited
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted C