Advisories · Technology

Airspan AirVelocity.

Every CVE that names Airspan AirVelocity among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36312 CVE record

Cross-site request forgery in Airspan AirVelocity
- Airspan AirVelocity
- Cross-site request forgery (CSRF)
Not analysed yet 16 Aug 2022
CVE-2022-36311 CVE record

Cross-site scripting in Airspan AirVelocity
- Airspan AirVelocity
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2022
CVE-2022-36310 CVE record

Airspan AirVelocity: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB…
- Airspan AirVelocity
- CWE-242
Not analysed yet 16 Aug 2022
CVE-2022-36309 CVE record

OS command injection in Airspan AirVelocity
- Airspan AirVelocity
- Command injection
Not analysed yet 16 Aug 2022
CVE-2022-36308 CVE record

Plaintext password storage in Airspan AirVelocity
- Airspan AirVelocity
- CWE-256
Not analysed yet 16 Aug 2022
CVE-2022-36307 CVE record

Insufficiently protected credentials in Airspan AirVelocity
- Airspan AirVelocity
- Hard-coded credentials
Not analysed yet 16 Aug 2022
CVE-2022-36306 CVE record

Airspan AirVelocity: An authenticated attacker can enumerate and download sensitive files…
- Airspan AirVelocity
- CWE-219
Not analysed yet 16 Aug 2022