Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS

• CVE-2025-27084 Medium 5.4 Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface 0.3%
• CVE-2025-27085 Medium 4.9 Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor 0.6%
• CVE-2025-27083 High 7.2 Authenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 1.2%
• CVE-2025-27082 High 7.2 Authenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write 0.6%
• CVE-2025-23052 High 7.2 Authenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI Interface 1.2%
• CVE-2025-23051 High 7.2 Authenticated Remote Code Execution in AOS Web-based Management Interface 0.7%