Vulnerability Database

314,433

Total vulnerabilities in the database

CVE-2025-37163

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.

  • Published: Nov 18, 2025
  • Updated: Nov 19, 2025
  • CVE: CVE-2025-37163
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
arubanetworks / airwave - 8.3.0.5