Security Advisory

CVE-2021-26969

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-05 16:41:32

Last updated 2024-08-03 20:40:45

Assigner hpe

CVSS score not scored

State PUBLISHED

Description

A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition.

← Browse all CVEs View on cve.org ↗