Login Request a demo
HA
Product
HPE Aruba Networking AOS-CX
by Hewlett Packard Enterprise (HPE) · last CVE Nov 18, 2025
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add HPE Aruba Networking AOS-CX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-37158
8.8
1%
Nov 18
Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX
Affected: 10.16.0000 through 10.16.1000; 10.15.0000 through 10.15.1020; 10.14.0000 through 10.14.1050; 10.13.0000 through 10.13.1090; 10.10.0000 through 10.10.1160
CVE-2025-37155
7.8
0%
Nov 18
Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface
Affected: 10.16.0000 through 10.16.1000; 10.15.0000 through 10.15.1020; 10.14.0000 through 10.14.1050; 10.13.0000 through 10.13.1090; 10.10.0000 through 10.10.1160
CVE-2025-37159
7.3
0%
Nov 18
Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software
Affected: 10.16.0000 through 10.16.1000; 10.15.0000 through 10.15.1020; 10.14.0000 through 10.14.1050; 10.13.0000 through 10.13.1090; 10.10.0000 through 10.10.1160
CVE-2025-37156
6.8
0%
Nov 18
ArubaOS-CX Platform-Level Denial-of-Service Vulnerability
Affected: 10.16.0000 through 10.16.1000; 10.15.0000 through 10.15.1020; 10.14.0000 through 10.14.1050; 10.13.0000 through 10.13.1090; 10.10.0000 through 10.10.1160
CVE-2025-37160
6.5
0%
Nov 18
Authenticated Broken Access Control (BAC) in REST API Configuration Service
Affected: 10.16.0000 through 10.16.1000; 10.15.0000 through 10.15.1020; 10.14.0000 through 10.14.1050; 10.13.0000 through 10.13.1090; 10.10.0000 through 10.10.1160
Showing 5