IN
Product
Instant
62
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 21Medium 19Low 0
Watch
Add Instant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25161 | 6.1 | Mar 30 | A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.8; 8.7.0.0 before 8.7.1.2 |
| CVE-2021-25158 | 5.9 | Mar 30 | A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant… Affected: 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.8; 8.7.0.0 before 8.7.1.2 |
| CVE-2017-13099 | 5.9 | Dec 13 | wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated Affected: before 6.5.4.6 |
| CVE-2022-37892 | 5.4 | Oct 7 | A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack… Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2024-42400 | 5.3 | Aug 6 | Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol Affected: 8.12.0.0 before 8.12.0.2; 8.10.0.0 before 8.10.0.13; 8.11.0.0 before 8.12.0.0; 8.7.0.0 before 8.10.0.0; 8.4.0.0 before 8.6.0.0; 6.4.0.0 before 6.6.0.0 |
| CVE-2024-42399 | 5.3 | Aug 6 | Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol Affected: 8.12.0.0 before 8.12.0.2; 8.10.0.0 before 8.10.0.13; 8.11.0.0 before 8.12.0.0; 8.7.0.0 before 8.10.0.0; 8.4.0.0 before 8.6.0.0; 6.4.0.0 before 6.6.0.0 |
| CVE-2024-42398 | 5.3 | Aug 6 | Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol Affected: 8.12.0.0 before 8.12.0.2; 8.10.0.0 before 8.10.0.13; 8.11.0.0 before 8.12.0.0; 8.7.0.0 before 8.10.0.0; 8.4.0.0 before 8.6.0.0; 6.4.0.0 before 6.6.0.0 |
| CVE-2024-42396 | 5.3 | Aug 6 | Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI Protocol Affected: 8.10.0.0 through 8.10.0.12; 8.12.0.0 through 8.12.0.1 |
| CVE-2022-37895 | 4.9 | Oct 7 | An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10 Affected: 6.4.0.0 before 6.4.4.8-4.2.4.21; 6.5.0.0 before 6.5.4.24; 8.6.0.0 before 8.6.0.19; 8.7.0.0 before 8.7.1.10; 8.10.0.0 before 8.10.0.2 |
| CVE-2021-25160 | 4.9 | Mar 30 | A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.8; 8.7.0.0 before 8.7.1.2 |
| CVE-2021-25157 | 4.9 | Mar 30 | A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.7; 8.7.0.0 before 8.7.1.1 |
| CVE-2021-25156 | 4.9 | Mar 30 | A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below;… Affected: 6.4.0.0 through 6.4.4.8-4.2.4.18; 6.5.0.0 before 6.5.4.19; 8.3.0.0 before 8.3.0.15; 8.5.0.0 before 8.5.0.12; 8.6.0.0 before 8.6.0.7; 8.7.1.0 before 8.7.1.1 |