CVE-2021-25165: Arubanetworks Airwave

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.

Affected products

• Arubanetworks Airwave: before 8.2.12.1 (fixed in 8.2.12.1)

Published 2021-04-28. Last modified 2026-06-17.