Skip to contentArista Networks Edge Threat Management vulnerabilities
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW UI Administrative Cross-Site ScriptingCVE-2026-256245.8 Medium
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW UI Arbitrary Command ExecutionCVE-2026-256237.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionCVE-2026-256227.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Reports Application Insecure Input ValidationCVE-2026-256217.0 High
- arista networks edge threat management - arista next generation firewall (ngfw), arista ng firewall +1 moreArista Edge Threat Management NGFW Captive Portal Encrypted Password Command InjectionCVE-2026-256207.0 High
- arista networks edge threat management - arista next generation firewallDiagnostics command injection vulnerabilityCVE-2025-6978EPSS 14.1%7.2 High
- arista networks edge threat management - arista next generation firewallCaptive Portal can allow authentication bypassCVE-2025-69798.8 High
- arista networks edge threat management - arista next generation firewallCaptive Portal can expose sensitive informationCVE-2025-6980Public exploit7.5 High
- arista ng firewall, arista networks edge threat management +1 moreSpecially constructed queries cause cross platform scripting leaking administrator tokensCVE-2024-91888.8 High
- arista ng firewall, arista networks edge threat management +1 moreA user with advanced report application access rights can perform actions for which they are not authorizedCVE-2024-475207.6 High
- arista ng firewall, arista networks edge threat management +1 moreBackup uploads to ETM subject to man-in-the-middle interceptionCVE-2024-475198.3 High
- arista ng firewall, arista networks edge threat management +1 moreSpecially constructed queries targeting ETM could discover active remote access sessionsCVE-2024-475186.4 Medium
- arista ng firewall, arista networks edge threat management +1 moreExpired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM accessCVE-2024-475176.8 Medium
- arista ng firewall, arista networks edge threat management +1 moreMultiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on th…CVE-2024-91348.3 High
- arista ng firewall, arista networks edge threat management +1 moreA user with administrator privileges is able to retrieve authentication tokensCVE-2024-91336.6 Medium
- arista ng firewall, arista networks edge threat management +1 moreThe administrator is able to configure an insecure captive portal scriptCVE-2024-91328.1 High
- arista ng firewall, arista networks edge threat management +1 moreA user with administrator privileges can perform command injectionCVE-2024-91317.2 High
- arista ng firewall, arista networks edge threat management - arista ng firewall (ngfw) +1 moreMultiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW).CVE-2024-278898.8 High