Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2025-37160

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.

  • Published: Nov 18, 2025
  • Updated: Nov 19, 2025
  • CVE: CVE-2025-37160
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
hpe / arubaos-cx 10.10.0000 10.10.1170
hpe / arubaos-cx 10.13.0000 10.13.1101
hpe / arubaos-cx 10.14.0000 10.14.1060
hpe / arubaos-cx 10.15.0000 10.15.1030
hpe / arubaos-cx 10.16.0000 10.16.1001