Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Hewlett Packard Enterprise
Arubaos Cx

Hewlett Packard Enterprise arubaos-cx Vulnerabilities: CVEs, CISA KEV & Security Advisories

Hewlett Packard Enterprise

57 CVEs

HE

Hewlett Packard Enterprise arubaos-cx Vulnerabilities

CVE security advisories and vulnerability history for arubaos-cx by Hewlett Packard Enterprise.

57

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.5

Avg CVSS

2021–2026

Last updated September 1, 2026

Overview

Hewlett Packard Enterprise arubaos-cx has 57 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.5. Affected platforms include aruba 8320, aruba 8325-32-c, aruba 8325-48y8c, aruba 8360-12c, aruba 8360-16y2c, aruba 8360-24xf2c.

Severity and exploitation

How the CVSS severity of Hewlett Packard Enterprise arubaos-cx's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High37

Medium15

Low2

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Hewlett Packard Enterprise arubaos-cx's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Hewlett Packard Enterprise arubaos-cx's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Hewlett Packard Enterprise arubaos-cx version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

10.18.0001 <= v <= 10.18.000134 CVEs
<= 10.10.118027 CVEs
10.13.0000 <= v <= 10.13.118027 CVEs
10.16.0000 <= v <= 10.16.105127 CVEs
10.17.0000 <= v <= 10.17.102127 CVEs
< 10.10.11817 CVEs
10.13.0000 <= v < 10.13.11907 CVEs
10.16.0000 <= v < 10.16.10607 CVEs
10.17.0000 <= v < 10.17.10307 CVEs
10.10.0000 <= v < 10.10.11706 CVEs
10.13.0000 <= v < 10.13.11016 CVEs
10.14.0000 <= v < 10.14.10606 CVEs
10.15.0000 <= v < 10.15.10306 CVEs
10.16.0000 <= v < 10.16.10016 CVEs
10.13.0000 <= v < 10.13.11615 CVEs
10.16.0000 <= v < 10.16.10305 CVEs
10.17.0000 <= v < 10.17.10015 CVEs
< 10.10.11804 CVEs
<= 10.13.11703 CVEs
10.06.0001 <= v <= 10.06.01703 CVEs
10.07.0001 <= v <= 10.07.00503 CVEs
10.08.0001 <= v <= 10.08.10303 CVEs
10.09.0001 <= v <= 10.09.00023 CVEs
10.16.0000 <= v <= 10.16.10503 CVEs
10.17.0000 <= v <= 10.17.10203 CVEs
10.18.0000 <= v <= 10.18.00013 CVEs
10.06.0000 <= v < 10.06.01801 CVE
10.06.0000 <= v < 10.06.02401 CVE
10.06.0000 <= v < 10.10.11801 CVE
10.07.0000 <= v < 10.07.00301 CVE
10.07.0001 <= v <= 10.07.00201 CVE
10.08.0000 <= v < 10.08.00101 CVE
10.08.0000 <= v <= 10.08.10701 CVE
10.08.0001 <= v <= 10.08.00011 CVE
10.09.0000 <= v < 10.09.00021 CVE
10.09.0000 <= v <= 10.09.10201 CVE
10.10.0000 <= v < 10.10.10301 CVE
10.10.0000 <= v < 10.13.10701 CVE
10.10.0000 <= v <= 10.10.10501 CVE
10.11.0000 <= v <= 10.11.10101 CVE
10.14.0000 <= v < 10.14.10301 CVE
10.14.0000 <= v < 10.14.10401 CVE
10.15.0000 <= v < 10.15.10001 CVE
10.15.0000 <= v < 10.15.10011 CVE

Fixed in

10.10.11817 CVEs
10.13.11907 CVEs
10.16.10607 CVEs
10.17.10307 CVEs
10.10.11706 CVEs
10.13.11016 CVEs
10.14.10606 CVEs
10.15.10306 CVEs
10.16.10016 CVEs
10.10.11805 CVEs
10.13.11615 CVEs
10.16.10305 CVEs
10.17.10015 CVEs
10.06.0180

Find a version

57 CVEs

Sort

Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
CVE-2026-73783CWE-121
Medium · CVSS 4.9
EPSS 0.4% (37th pct)2026-09-01
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
CVE-2026-73782CWE-134
High · CVSS 8.8
EPSS 0.4% (34th pct)2026-09-01
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
CVE-2026-73781CWE-79
High · CVSS 8.4
EPSS 0.5% (42th pct)2026-09-01
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
CVE-2026-73780
Patch
CWE-352
High · CVSS 8.3
EPSS 0.2% (9th pct)2026-09-01
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
CVE-2026-73779CWE-269
High · CVSS 8.2
EPSS 0.2% (14th pct)2026-09-01
Credential Manager Vulnerability Allows Unauthorized Administrative Access
CVE-2026-73778CWE-521
Critical · CVSS 9.8
EPSS 0.5% (42th pct)2026-09-01
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
CVE-2026-73777CWE-287
High · CVSS 8.1
EPSS 0.5% (38th pct)2026-09-01
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
CVE-2026-73776CWE-347
High · CVSS 7.9
EPSS 0.1% (2th pct)2026-09-01
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
CVE-2026-73775CWE-200
High · CVSS 7.7
EPSS 0.5% (39th pct)2026-09-01
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
CVE-2026-73774CWE-120
High · CVSS 7.6
EPSS 0.3% (20th pct)2026-09-01
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
CVE-2026-73773CWE-400
High · CVSS 7.5
EPSS 0.5% (38th pct)2026-09-01
Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
CVE-2026-73772CWE-120
Medium · CVSS 6.5
EPSS 0.3% (20th pct)2026-09-01
Improper Authentication Handling in AOS-CX Management Interface and API
CVE-2026-73771CWE-287
High · CVSS 7.5
EPSS 0.5% (39th pct)2026-09-01
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
CVE-2026-73770CWE-73
High · CVSS 7.3
EPSS 0.2% (14th pct)2026-09-01
Local Privilege Escalation in AOS-CX Command Line Interface
CVE-2026-73768CWE-20
High · CVSS 7.3
EPSS 0.2% (8th pct)2026-09-01
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
CVE-2026-73767CWE-78
High · CVSS 7.2
EPSS 1.7% (76th pct)2026-09-01
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
CVE-2026-73766CWE-77
High · CVSS 7.2
EPSS 1.5% (73th pct)2026-09-01
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
CVE-2026-73765CWE-22
High · CVSS 7.2
EPSS 0.9% (58th pct)2026-09-01
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
CVE-2026-73764CWE-287
High · CVSS 7.1
EPSS 0.3% (22th pct)2026-09-01
Unauthenticated Remote Command Execution in Management Component
CVE-2026-73763CWE-77
High · CVSS 8.8
EPSS 0.5% (40th pct)2026-09-01
Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
CVE-2026-73762CWE-284
Medium · CVSS 6.6
EPSS 0.3% (20th pct)2026-09-01
Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
CVE-2026-73761CWE-125
Medium · CVSS 6.5
EPSS 0.3% (19th pct)2026-09-01
Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
CVE-2026-73760CWE-22
Medium · CVSS 6.5
EPSS 0.6% (45th pct)2026-09-01
Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
CVE-2026-73759
Patch
CWE-400
Medium · CVSS 6.5
EPSS 0.3% (20th pct)2026-09-01
Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
CVE-2026-73758CWE-269
Medium · CVSS 6.5
EPSS 0.3% (21th pct)2026-09-01
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
CVE-2026-73757CWE-918
Medium · CVSS 6.4
EPSS 0.3% (22th pct)2026-09-01
Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
CVE-2026-73756CWE-319
Medium · CVSS 5.9
EPSS 0.3% (17th pct)2026-09-01
Privilege Escalation via Unauthorized Access to Sensitive Session Information
CVE-2026-73755CWE-269
Medium · CVSS 5.7
EPSS 0.3% (22th pct)2026-09-01
Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
CVE-2026-73754CWE-400
Medium · CVSS 5.3
EPSS 0.3% (25th pct)2026-09-01
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
CVE-2026-73753
Patch
CWE-78
High · CVSS 8.8
EPSS 0.7% (51th pct)2026-09-01

Showing 30 of 57

Common weakness types

The CWE weakness categories most often found in Hewlett Packard Enterprise arubaos-cx CVEs. Follow any weakness for its full explanation.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')9 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-284Improper Access Control4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-269Improper Privilege Management3 CVEs

Disclosure activity by year

How many Hewlett Packard Enterprise arubaos-cx CVEs were published each year.

2021

1

2022

4

2023

2

2025

8

2026

42

Other Hewlett Packard Enterprise products

Browse vulnerabilities for other products by Hewlett Packard Enterprise.

Intelligent Management Center (iMC) PLAT95 CVEs Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central67 CVEs Fabric Composer52 CVEs AOS-CX46 CVEs Aruba ClearPass Policy Manager44 CVEs aruba cx 10000-48y6c (r8p13a)42 CVEs aruba cx 10000-48y6c (r8p14a)42 CVEs aruba cx 10000-48y6c (s0f98a)42 CVEs

All Hewlett Packard Enterprise vulnerabilities

Frequently asked questions

Common questions about Hewlett Packard Enterprise arubaos-cx vulnerabilities.

How many CVEs does Hewlett Packard Enterprise arubaos-cx have?: Hewlett Packard Enterprise arubaos-cx has 57 published CVE records since 2021.
How many Hewlett Packard Enterprise arubaos-cx CVEs are in CISA KEV?: None of Hewlett Packard Enterprise arubaos-cx's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Hewlett Packard Enterprise arubaos-cx vulnerabilities?: Yes — 1 of Hewlett Packard Enterprise arubaos-cx's CVEs have a known public exploit.
Which versions of Hewlett Packard Enterprise arubaos-cx are affected?: 68 distinct Hewlett Packard Enterprise arubaos-cx versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Hewlett Packard Enterprise arubaos-cx CVEs?: Hewlett Packard Enterprise arubaos-cx's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-400 (Uncontrolled Resource Consumption).
How many critical Hewlett Packard Enterprise arubaos-cx vulnerabilities are there?: Hewlett Packard Enterprise arubaos-cx has 3 critical and 37 high-severity CVEs.
What is the average severity of Hewlett Packard Enterprise arubaos-cx CVEs?: The average CVSS base score across Hewlett Packard Enterprise arubaos-cx's scored CVEs is 7.5.

References

All Hewlett Packard Enterprise vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Hewlett Packard Enterprise arubaos-cx vulnerabilities

Get an alert for each new Hewlett Packard Enterprise arubaos-cx CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

1 CVE

10.06.02401 CVE

10.07.00301 CVE

10.08.00101 CVE

10.09.00021 CVE

10.10.10301 CVE

10.13.10701 CVE

10.14.10301 CVE

10.14.10401 CVE

10.15.10001 CVE

10.15.10011 CVE