Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.06%Sep 22, 2026
- Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityPatch nowKEVEPSS 1.00%Jul 27, 2026
- Medium6.9Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityPatch nowKEVEPSS 0.65%May 5, 2026
- Low2.6n affected platforms running Arista EOS, ACL policies may not be enforced.Check this weekEPSS 52.00%May 27, 2025
- Medium5.3On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific casesCheck this weekEPSS 20.00%May 27, 2025
- Medium6.5On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resultinCheck this weekEPSS 26.00%May 27, 2025
- High7.5On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expecCheck this weekEPSS 59.00%May 8, 2025
- Critical9.1On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.Check this weekEPSS 50.00%May 8, 2025
- Critical10.0On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended.Check this weekEPSS 78.00%May 8, 2025
- Critical10.0On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permisCheck this weekEPSS 66.00%May 8, 2025
- High8.7On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.Check this weekEPSS 63.00%May 8, 2025
- Medium6.5On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-serveCheck this weekEPSS 28.00%May 7, 2025
- High8.8Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability.Check if you run itEPSS 0.64%Apr 23, 2025
- High8.1VMware SD-WAN Edge by VeloCloud Command Injection VulnerabilityPatch nowKEVEPSS 86.25%Jun 11, 2018
14 records · page 1 of 1
PreviousNext