CP
Product
Clearpass Policy Manager
On CISA KEVExploited in the wildRansomware-linked
136
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 71Medium 40Low 0
Watch
Add Clearpass Policy Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40989 | 7.8 | Oct 15 | A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2020-7123 | 7.8 | Apr 28 | A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.12; 6.8.0 before 6.8.5 |
| CVE-2021-26677 | 7.8 | Feb 23 | A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.7; 6.9.0 before 6.9.2 |
| CVE-2022-37884 | 7.5 | Sep 20 | A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a… Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-23671 | 7.5 | May 17 | A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below,… Affected: through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 through 6.9.9; 6.10.0 through 6.10.4; 6.8.9; 6.8.9; +1 more |
| CVE-2021-37738 | 7.5 | Oct 15 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -… Affected: 6.8.0 through 6.8.9; 6.9.0 through 6.9.7; 6.10.0 before 6.10.2 |
| CVE-2022-43538 | 7.2 | Jan 5 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-43537 | 7.2 | Jan 5 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-37883 | 7.2 | Sep 20 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-37882 | 7.2 | Sep 20 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-37881 | 7.2 | Sep 20 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-37880 | 7.2 | Sep 20 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-37879 | 7.2 | Sep 20 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-37878 | 7.2 | Sep 20 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-23673 | 7.2 | May 17 | A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x… Affected: through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 through 6.9.9; 6.10.0 through 6.10.4; 6.8.9; 6.8.9; +1 more |
| CVE-2022-23672 | 7.2 | May 17 | A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x… Affected: through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 through 6.9.9; 6.10.0 through 6.10.4; 6.8.9; 6.8.9; +1 more |
| CVE-2022-23667 | 7.2 | May 16 | A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x… Affected: before 6.8.9; 6.9.0 before 6.9.10; 6.10.0 before 6.10.5; 6.8.9; 6.8.9; 6.8.9 |
| CVE-2021-40998 | 7.2 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-40991 | 7.2 | Oct 15 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-40992 | 7.2 | Oct 15 | A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-40988 | 7.2 | Oct 15 | A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-40987 | 7.2 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-40986 | 7.2 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-37739 | 7.2 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 through 6.8.9; 6.9.0 through 6.9.7; 6.10.0 before 6.10.2 |
| CVE-2021-40999 | 7.2 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2 |
| CVE-2021-34611 | 7.2 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-34610 | 7.2 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-29150 | 7.2 | Jul 8 | A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-26680 | 7.2 | Feb 23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5; 6.7.14; 6.8.8 |
| CVE-2021-26679 | 7.2 | Feb 23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5; 6.7.14; 6.8.8 |
| CVE-2021-26684 | 7.2 | Feb 23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: through 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5 |
| CVE-2021-26683 | 7.2 | Feb 23 | A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: through 6.7.14; 6.8.0 through 6.8.8; 6.9.0 before 6.9.5 |
| CVE-2021-26681 | 7.2 | Feb 23 | A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.7; 6.9.0 before 6.9.2 |
| CVE-2020-7117 | 7.2 | Jun 3 | The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution Affected: 6.7.0 through 6.7.13; 6.8.0 before 6.8.6; 6.9.0 before 6.9.1 |
| CVE-2020-7116 | 7.2 | Jun 3 | The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution Affected: 6.7.0 through 6.7.13; 6.8.0 before 6.8.6; 6.9.0 before 6.9.1 |
| CVE-2018-7079 | 7.2 | Dec 7 | Aruba ClearPass Policy Manager guest authorization failure Affected: before 6.6.10; 6.7.0 before 6.7.6 |
| CVE-2018-7067 | 7.2 | Dec 7 | A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise Affected: before 6.6.10; 6.7.0 before 6.7.6 |
| CVE-2018-7065 | 7.2 | Dec 7 | An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation Affected: before 6.6.10; 6.7.0 before 6.7.6 |
| CVE-2024-26301 | 6.5 | Feb 27 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information Affected: 6.9.0 before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.6; 6.9.13; 6.9.13; 6.9.13; +6 more |
| CVE-2023-43508 | 6.5 | Oct 25 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of… Affected: before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.4; 6.9.13; 6.9.13; 6.9.13; +3 more |
| CVE-2023-25591 | 6.5 | Mar 22 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information Affected: 6.9.0 through 6.9.13; 6.10.0 through 6.10.8; 6.11.0; 6.11.1 |
| CVE-2022-23670 | 6.5 | May 16 | A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below,… Affected: before 6.8.9; 6.9.0 before 6.9.10; 6.10.0 before 6.10.5; 6.8.9; 6.8.9; 6.8.9 |
| CVE-2021-40990 | 6.5 | Oct 15 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-29152 | 6.5 | Jul 8 | A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-26686 | 6.5 | Feb 23 | A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.7; 6.9.0 before 6.9.3 |
| CVE-2021-26685 | 6.5 | Feb 23 | A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: through 6.7.14; 6.8.0 through 6.8.8; 6.9.0 before 6.9.5 |
| CVE-2024-53672 | 6.3 | Dec 3 | A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host Affected: 6.11.0 before 6.11.10; 6.12.0 before 6.12.3 |
| CVE-2023-43510 | 6.3 | Oct 25 | A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host Affected: before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.4; 6.9.13; 6.9.13; 6.9.13; +3 more |
| CVE-2021-40995 | 6.3 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |
| CVE-2021-40994 | 6.3 | Oct 15 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7 |