airspan airvelocity 1500 firmware

Name: airspan airvelocity 1500 firmware
Brand: airspan

productUS

cpe:2.3:o:airspan:airvelocity_1500_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

1critical3high3medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-36309US	high8.8	24.6% (98th)	—	no fix	2022-08-16	9.3.0.01249 → 15.18.00.2511
CVE-2022-36310US	high8.8	1.58% (75th)	—	no fix	2022-08-16	9.3.0.01249 → 15.18.00.2511
CVE-2022-36306US	medium6.5	1.00% (63rd)	—	no fix	2022-08-16	9.3.0.01249 → 15.18.00.2511
CVE-2022-36308US	critical9.1	0.75% (55th)	—	no fix	2022-08-16	9.3.0.01249 → 15.18.00.2511
CVE-2022-36311US	medium6.1	0.45% (39th)	—	15.18.00.2511	2022-08-16	< 15.18.00.2511
CVE-2022-36312US	high8.8	0.34% (27th)	—	no fix	2022-08-16	= 15.18.00.2511
CVE-2022-36307US	medium6.8	0.31% (23rd)	—	no fix	2022-08-16	9.3.0.01249 → 15.18.00.2511

The flaw types (CWEs) most of these CVEs share.

CWE-522Insufficiently Protected Credentials2 CVEs
CWE-219Storage of File with Sensitive Data Under Web Root1 CVEs
CWE-242Use of Inherently Dangerous Function1 CVEs
CWE-256Plaintext Storage of a Password1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-552Files or Directories Accessible to External Parties1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.