CVE-2016-8526 in AirWave

Prediction

by VulDB Data Team • 06/01/2025

A vulnerability has been found in Aruba AirWave up to 8.2.3. This affects an unknown part. The manipulation leads to xml external entity reference. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.2.3.1 is able to mitigate this issue. It is suggested to upgrade the affected component.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 10/07/2016
• Disclosure: 08/06/2018
• Moderation: accepted
• Entry: VDB-97452
• CPE: ready
• CWE: CWE-611 (confirmed)
• Exploit: Download
• CVSS: 8.8 (NVD)
• EPSS: 0.09815
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8526
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8526
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8526/