CL
Product
Clearpass
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 9Low 0
Watch
Add Clearpass to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29145 | 9.8 | Apr 29 | A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.6; 6.9.0 before 6.9.1 |
| CVE-2020-7114 | 9.8 | Apr 16 | A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by… Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2016-4401 | 9.8 | Nov 6 | Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials Affected: before 6.5.7; 6.6.0 before 6.6.2 |
| CVE-2016-2034 | 9.8 | Jun 8 | SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0 Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +2 more |
| CVE-2021-29147 | 8.8 | Apr 29 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.4; 6.7.14 |
| CVE-2018-7060 | 8.8 | Aug 6 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users Affected: 6.6.0 before 6.6.9; 6.7.0 before 6.7.1 |
| CVE-2015-3655 | 8.8 | Aug 29 | Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication… Affected: 6.4.0 before 6.4.7; 6.5.0 before 6.5.2 |
| CVE-2021-29140 | 8.2 | Apr 29 | A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2020-7111 | 7.2 | Apr 16 | A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2015-4649 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3657 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3656 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3654 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3653 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2014-2071 | 7.1 | Jan 8 | Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single… Affected: 6.1 through 6.1.4; 6.2 before 6.2.5.61640; 6.3 before 6.3.0.61712; 6.1 through 6.1.4 |
| CVE-2021-29141 | 6.5 | Apr 29 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.5 |
| CVE-2021-29138 | 6.5 | Apr 29 | A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.5; 6.8.0 before 6.8.1 |
| CVE-2021-29144 | 6.5 | Apr 29 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.5 |
| CVE-2018-0489 | 6.5 | Feb 27 | Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows… Affected: 6.6.0 through 6.6.9; 6.7.0 before 6.7.2 |
| CVE-2021-29146 | 5.4 | Apr 29 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.5; 6.7.14 |
| CVE-2020-7113 | 4.9 | Apr 16 | A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting… Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2021-29139 | 4.8 | Apr 29 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.5; 6.7.14 |
| CVE-2021-29142 | 4.8 | Apr 29 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.5; 6.7.14 |
| CVE-2020-7110 | 4.8 | Apr 16 | ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass… Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2014-6627 | – | Nov 19 | Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than… Affected: through 6.3.4; 6.4.0 |
| CVE-2014-6626 | – | Nov 19 | Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass… Affected: through 6.3.4; 6.4.0 |
| CVE-2014-6625 | – | Nov 19 | The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors Affected: through 6.3.4; 6.4.0 |
| CVE-2014-6624 | – | Nov 19 | The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors Affected: through 6.3.4; 6.4.0 |
| CVE-2014-6622 | – | Nov 19 | Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine the validity of filenames via unspecified vectors Affected: through 6.3.4; 6.4.0 |
| CVE-2014-6621 | – | Nov 19 | Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to… Affected: through 6.3.4; 6.4.0 |
| CVE-2014-5342 | – | Nov 19 | Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than… Affected: through 6.3.4; 6.4.0 |
| CVE-2014-6623 | – | Nov 7 | Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the… Affected: through 6.3.5; 6.4.0 |
| CVE-2014-6620 | – | Nov 7 | Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via… Affected: through 6.3.5; 6.4.0 |
| CVE-2014-4031 | – | Jul 15 | The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain… Affected: 5.0.1; 5.1; 5.2; 6.0.1; 6.0.2; 6.1; +4 more |
| CVE-2014-4013 | – | Jul 14 | SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows… Affected: 5.0.1; 5.1; 5.2; 6.0.1; 6.0.2; 6.1; +4 more |
| CVE-2013-2269 | – | Oct 1 | The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass… Affected: 5.0.1; 5.1; 5.2; 6.0.1; 6.0.2 |
Showing 36