Skip to main content
0-Doubt
NewsInvestorsQuestionnairesDeveloperHelp
AnonymousSign in
0-Doubt — neutral IT/Security research
BrowseResellersCertified analystsRFI/RFP questionnairesHow trust worksHelp & FAQAPI
  1. Home/
  2. HPE Aruba Networking/
  3. HPE Aruba Networking

HPE Aruba Networking

AI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 35 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~39 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

AI-powered enterprise networking platform with integrated security and management

by HPE Aruba Networking · hpe.com · source ↗

Known CVEs (35)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score.

RSS ⇢
  • CVE-2026-23818 ↗HIGH 8.82026

    A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the lo…

  • CVE-2026-23599 ↗HIGH 7.82026

    A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attac…

  • CVE-2026-23598 ↗MEDIUM 6.52026

    Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could a…

  • CVE-2026-23597 ↗MEDIUM 6.52026

    Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could a…

  • CVE-2026-23593 ↗HIGH 7.52026

    A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could al…

  • CVE-2026-23592 ↗HIGH 7.22026

    Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an a…

  • CVE-2025-37186 ↗HIGH 7.82026

    A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attac…

  • CVE-2025-37163 ↗HIGH 7.22025

    A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute …

  • CVE-2025-37128 ↗MEDIUM 6.82025

    A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could …

  • CVE-2025-37127 ↗HIGH 7.22025

    A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could all…

  • CVE-2025-37126 ↗HIGH 7.22025

    A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successfu…

  • CVE-2025-37125 ↗HIGH 7.52025

    A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unaut…

  • CVE-2025-37124 ↗HIGH 8.62025

    A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route pote…

  • CVE-2025-37123 ↗HIGH 8.82025

    A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this v…

  • CVE-2025-37100 ↗HIGH 7.72025

    A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iterativ…

  • CVE-2025-25041 ↗MEDIUM 5.52025

    A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allo…

  • CVE-2025-25040 ↗LOW 3.32025

    A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patche…

  • CVE-2025-25039 ↗MEDIUM 4.72025

    A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A succ…

  • CVE-2025-23060 ↗MEDIUM 6.62025

    A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to pe…

  • CVE-2025-23059 ↗MEDIUM 6.82025

    A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerabili…

  • …and 15 more

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Secure Access Service Edge (SASE/SSE) products

see all →
  • 1Password Device Trust · 1Password
  • AWS Verified Access · Amazon Web Services, Inc.
  • Absolute Core · Absolute
  • Absolute Resilient, AI-powered SSE · Absolute
  • Agilicus · Agilicus
  • Akamai Enterprise Application Access · Akamai
  • Akamai Secure Internet Access Enterprise · Akamai
  • Alibaba Cloud Secure Access Service Edge · Alibaba Cloud