Advisories · Technology
Hewlett Packard Enterprise (HPE) AOS-CX.
Every CVE that names Hewlett Packard Enterprise (HPE) AOS-CX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 8.8 High
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 8.4 High
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Cross-site scripting (XSS)
- CVSS 8.3 High
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Cross-site request forgery (CSRF)
- CVSS 8.2 High
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Privilege escalation
- CVSS 8.1 High
Credential Manager Vulnerability Allows Unauthorized Administrative Access
- Hewlett Packard Enterprise (HPE) AOS-CX
- Hard-coded credentials
- CVSS 8.1 High
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
- Hewlett Packard Enterprise (HPE) AOS-CX
- Authentication bypass
- CVSS 7.9 High
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Weak cryptography or TLS
- CVSS 7.7 High
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Information disclosure
- CVSS 7.6 High
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 7.5 High
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Denial of service
- CVSS 6.5 Medium
Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 7.5 High
Improper Authentication Handling in AOS-CX Management Interface and API
- Hewlett Packard Enterprise (HPE) AOS-CX
- Authentication bypass
- CVSS 7.3 High
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Path traversal
- CVSS 7.3 High
Local Privilege Escalation in AOS-CX Command Line Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- CWE-20
- CVSS 7.2 High
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 7.2 High
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 7.2 High
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Path traversal
- CVSS 7.1 High
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Authentication bypass
- CVSS 7.1 High
Unauthenticated Remote Command Execution in Management Component
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 6.6 Medium
Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
- Hewlett Packard Enterprise (HPE) AOS-CX
- Broken access control
- CVSS 6.5 Medium
Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 6.5 Medium
Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Path traversal
- CVSS 6.5 Medium
Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Denial of service
- CVSS 6.5 Medium
Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Privilege escalation
- CVSS 6.4 Medium
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Server-side request forgery (SSRF)
- CVSS 5.9 Medium
Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
- Hewlett Packard Enterprise (HPE) AOS-CX
- Weak cryptography or TLS
- CVSS 5.7 Medium
Privilege Escalation via Unauthorized Access to Sensitive Session Information
- Hewlett Packard Enterprise (HPE) AOS-CX
- Privilege escalation
- CVSS 5.3 Medium
Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Denial of service
- CVSS 8.8 High
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 8.8 High
Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Path traversal
- CVSS 8.8 High
Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 8.8 High
Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
- Hewlett Packard Enterprise (HPE) AOS-CX
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Broken access control
- CVSS 7.2 High
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Path traversal
- CVSS 7.2 High
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 8.8 High
Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
- Hewlett Packard Enterprise (HPE) AOS-CX
- Memory corruption
- CVSS 6.5 Medium
Unauthenticated Open Redirect allows URL Manipulation in Web Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Open redirect
- CVSS 7.2 High
Authenticated Command Injection found in admin AOS-CX CLI command
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 7.2 High
Authenticated Command Injection found in AOS-CX Administrative CLI Command
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 8.8 High
Authenticated Command Injection found in AOS-CX CLI Command
- Hewlett Packard Enterprise (HPE) AOS-CX
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset
- Hewlett Packard Enterprise (HPE) AOS-CX
- Authentication bypass
- CVSS 6.0 Medium
Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Information disclosure
- CVSS 4.3 Medium
Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface
- Hewlett Packard Enterprise (HPE) AOS-CX
- Information disclosure
- CVSS 3.3 Low
Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches
- Hewlett Packard Enterprise (HPE) AOS-CX
- Broken access control
- CVSS 3.4 Low
Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches
- Hewlett Packard Enterprise (HPE) AOS-CX
- Broken access control