UpHeron
All vulnerabilities

Servers and applications

CVE-2019-5315

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.

Severity
High 7.2
Published
13 Sept 2019
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
8.3.0.0
Exploit chance
2.2% in the next 30 daysHigher than 83% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • From 8.0.0.0 before 8.3.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-5315
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-5315