n/a Aruba AirWave Management Platform

Name: n/a Aruba AirWave Management Platform
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical17high10medium0low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-25151US	high8.8	11.7% (96th)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-26962US	high7.2	3.23% (88th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26963US	high7.2	2.99% (87th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-25166US	high8.8	1.51% (74th)	—	no fix	2021-04-29	≤ Prior to 8.2.12.1
CVE-2021-25167US	high8.8	1.47% (74th)	—	no fix	2021-04-29	≤ Prior to 8.2.12.1
CVE-2021-26969US	medium6.5	1.46% (73rd)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26970US	medium6.3	1.39% (72nd)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26971US	medium6.3	1.34% (71st)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-25164US	medium6.5	1.31% (71st)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-25147US	high8.1	1.26% (69th)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-25152US	high7.2	1.24% (69th)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-25163US	high8.1	1.19% (68th)	—	no fix	2021-04-29	≤ Prior to 8.2.12.1
CVE-2021-25165US	high8.1	1.19% (68th)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-26966US	medium6.5	1.17% (67th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26965US	medium6.5	1.17% (67th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-25153US	high8.1	1.09% (65th)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-25154US	high7.5	1.02% (63rd)	—	no fix	2021-04-28	≤ Prior to 8.2.12.1
CVE-2021-26964US	high7.1OT elevated	0.99% (62nd)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26967US	medium6.1	0.83% (57th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2022-37918US	high8.1	0.82% (57th)	—	no fix	2022-12-08	≤ 8.2.15.0 and below
CVE-2022-37917US	high8.1	0.82% (57th)	—	no fix	2022-12-08	≤ 8.2.15.0 and below
CVE-2022-37916US	high8.1	0.82% (57th)	—	no fix	2022-12-08	≤ 8.2.15.0 and below
CVE-2021-29137US	medium6.1	0.75% (55th)	—	no fix	2021-04-29	≤ Prior to 8.2.12.1
CVE-2021-26968US	medium4.8	0.66% (51st)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26961US	high8.8	0.63% (50th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-26960US	high8.8	0.63% (50th)	—	no fix	2021-03-05	≤ Prior to 8.2.12.0
CVE-2021-37715US	medium4.8	0.46% (40th)	—	no fix	2021-08-26	≤ Prior to 8.2.13.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-611Improper Restriction of XML External Entity Reference4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan