{"schema_version":1,"title":"Hpe Arubaos-Cx vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Hpe Arubaos-Cx: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-37160, was published on 18 November 2025.","url":"https://junglewise.ai/threats/technologies/arubaos-cx","json_url":"https://junglewise.ai/threats/technologies/arubaos-cx.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/arubaos-cx","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":6},"latest":[{"cve":"CVE-2025-37160","cvss":5.3,"epss":0.0029,"slug":"cve-2025-37160-a-broken-access-control-bac-vulnerability-in-the-web-based","title":"A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:48.133+00:00","url":"https://junglewise.ai/threats/cve-2025-37160-a-broken-access-control-bac-vulnerability-in-the-web-based"},{"cve":"CVE-2025-37159","cvss":5.8,"epss":0.0026,"slug":"cve-2025-37159-a-vulnerability-in-the-web-management-interface-of-the-aos-cx-os","title":"A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.98+00:00","url":"https://junglewise.ai/threats/cve-2025-37159-a-vulnerability-in-the-web-management-interface-of-the-aos-cx-os"},{"cve":"CVE-2025-37158","cvss":6.7,"epss":0.0066,"slug":"cve-2025-37158-a-command-injection-vulnerability-exists-in-the-aos-cx-operating","title":"A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.7+00:00","url":"https://junglewise.ai/threats/cve-2025-37158-a-command-injection-vulnerability-exists-in-the-aos-cx-operating"},{"cve":"CVE-2025-37157","cvss":6.7,"epss":0.0066,"slug":"cve-2025-37157-a-command-injection-vulnerability-exists-in-the-aos-cx-operating","title":"A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.533+00:00","url":"https://junglewise.ai/threats/cve-2025-37157-a-command-injection-vulnerability-exists-in-the-aos-cx-operating"},{"cve":"CVE-2025-37156","cvss":6.8,"epss":0.003,"slug":"cve-2025-37156-a-platform-level-denial-of-service-dos-vulnerability-exists-in","title":"A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.363+00:00","url":"https://junglewise.ai/threats/cve-2025-37156-a-platform-level-denial-of-service-dos-vulnerability-exists-in"},{"cve":"CVE-2025-37155","cvss":7.8,"epss":0.0012,"slug":"cve-2025-37155-a-vulnerability-in-the-ssh-restricted-shell-interface-of-the","title":"A vulnerability in the SSH restricted shell interface of the network management services allows improper access…","severity":"high","exploited":false,"published_at":"2025-11-18T19:15:47.17+00:00","url":"https://junglewise.ai/threats/cve-2025-37155-a-vulnerability-in-the-ssh-restricted-shell-interface-of-the"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Hpe Networking Fabric Composer","slug":"networking-fabric-composer","vulnerabilities":92,"url":"https://junglewise.ai/threats/technologies/networking-fabric-composer"},{"name":"Hpe EdgeConnect SD-WAN Gateway","slug":"edgeconnect-sd-wan-gateway","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateway"},{"name":"Hpe ClearPass Policy Manager","slug":"hpe-clearpass-policy-manager","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager"},{"name":"Hpe Analytics and Location Engine","slug":"analytics-and-location-engine","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/analytics-and-location-engine"},{"name":"Hpe Networking Instant On","slug":"networking-instant-on","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/networking-instant-on"},{"name":"Hpe AOS-S","slug":"hpe-aos-s","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/hpe-aos-s"},{"name":"Hpe <UNKNOWN>","slug":"hpe-unknown","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/hpe-unknown"},{"name":"Hpe Networking Instant ON APs","slug":"networking-instant-on-aps","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/networking-instant-on-aps"},{"name":"Hpe Networking VIA","slug":"networking-via","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/networking-via"},{"name":"Hpe EdgeConnect SD-WAN Orchestrator","slug":"hpe-edgeconnect-sd-wan-orchestrator","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/hpe-edgeconnect-sd-wan-orchestrator"},{"name":"Hpe OneView","slug":"hpe-oneview","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/hpe-oneview"}],"technology":{"hub":true,"name":"Hpe Arubaos-Cx","slug":"arubaos-cx","vendor":{"hub":true,"name":"Hpe","slug":"hpe","url":"https://junglewise.ai/threats/vendors/hpe"},"aliases":[],"homepage":"https://www.arubanetworks.com/products/switches/switch-software/","description":"ArubaOS-CX is a cloud-native network operating system for switches and routers.","url":"https://junglewise.ai/threats/technologies/arubaos-cx"},"most_severe":[{"cve":"CVE-2025-37155","cvss":7.8,"epss":0.0012,"slug":"cve-2025-37155-a-vulnerability-in-the-ssh-restricted-shell-interface-of-the","title":"A vulnerability in the SSH restricted shell interface of the network management services allows improper access…","severity":"high","exploited":false,"published_at":"2025-11-18T19:15:47.17+00:00","url":"https://junglewise.ai/threats/cve-2025-37155-a-vulnerability-in-the-ssh-restricted-shell-interface-of-the"},{"cve":"CVE-2025-37156","cvss":6.8,"epss":0.003,"slug":"cve-2025-37156-a-platform-level-denial-of-service-dos-vulnerability-exists-in","title":"A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.363+00:00","url":"https://junglewise.ai/threats/cve-2025-37156-a-platform-level-denial-of-service-dos-vulnerability-exists-in"},{"cve":"CVE-2025-37158","cvss":6.7,"epss":0.0066,"slug":"cve-2025-37158-a-command-injection-vulnerability-exists-in-the-aos-cx-operating","title":"A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.7+00:00","url":"https://junglewise.ai/threats/cve-2025-37158-a-command-injection-vulnerability-exists-in-the-aos-cx-operating"},{"cve":"CVE-2025-37157","cvss":6.7,"epss":0.0066,"slug":"cve-2025-37157-a-command-injection-vulnerability-exists-in-the-aos-cx-operating","title":"A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.533+00:00","url":"https://junglewise.ai/threats/cve-2025-37157-a-command-injection-vulnerability-exists-in-the-aos-cx-operating"},{"cve":"CVE-2025-37159","cvss":5.8,"epss":0.0026,"slug":"cve-2025-37159-a-vulnerability-in-the-web-management-interface-of-the-aos-cx-os","title":"A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:47.98+00:00","url":"https://junglewise.ai/threats/cve-2025-37159-a-vulnerability-in-the-web-management-interface-of-the-aos-cx-os"},{"cve":"CVE-2025-37160","cvss":5.3,"epss":0.0029,"slug":"cve-2025-37160-a-broken-access-control-bac-vulnerability-in-the-web-based","title":"A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote…","severity":"medium","exploited":false,"published_at":"2025-11-18T19:15:48.133+00:00","url":"https://junglewise.ai/threats/cve-2025-37160-a-broken-access-control-bac-vulnerability-in-the-web-based"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}