CVE-2025-37160: falha de média gravidade em Hewlett Packard Enterprise (HPE) HPE Aruba…
Authenticated Broken Access Control (BAC) in REST API Configuration Service
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking AOS-CXCVEs relacionadas — Hewlett Packard Enterprise (HPE) HPE Aruba…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-37158MEDIUMAuthenticated Command Injection allows Unauthorized Command Execution in AOS-CXEPSS 0.6%CVE-2025-37156MEDIUMArubaOS-CX Platform-Level Denial-of-Service VulnerabilityEPSS 0.3%CVE-2025-37159MEDIUMAuthenticated Session Hijacking Allows Unauthorized Access in Network Switching SoftwareEPSS 0.3%CVE-2025-37155HIGHAuthenticated Privilege Escalation Allows Unauthorized Access in Network Management InterfaceEPSS 0.1%