Clearpass Policy Manager vulnerabilities | LiveThreat CVE Feed

Product

Clearpass Policy Manager

by Arubanetworks · last CVE Feb 4, 2025

On CISA KEVExploited in the wildRansomware-linked

136

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities136 In the news0 Timeline

Severity mix

Critical 17High 71Medium 40Low 0

Severity

All severities136 Critical17 High71 Medium40 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Clearpass Policy Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40998	7.2	3%	Oct 15	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7
CVE-2021-40991	7.2	1%	Oct 15	A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7
CVE-2021-40992	7.2	1%	Oct 15	A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7
CVE-2021-40988	7.2	4%	Oct 15	A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7
CVE-2021-40987	7.2	3%	Oct 15	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7
CVE-2021-40986	7.2	3%	Oct 15	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2; 6.8.9; 6.9.7
CVE-2021-37739	7.2	3%	Oct 15	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 through 6.8.9; 6.9.0 through 6.9.7; 6.10.0 before 6.10.2
CVE-2021-40999	7.2	2%	Oct 15	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass… Affected: 6.8.0 before 6.8.9; 6.9.0 before 6.9.7; 6.10.0 before 6.10.2
CVE-2021-34611	7.2	3%	Jul 8	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6
CVE-2021-34610	7.2	3%	Jul 8	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6
CVE-2021-29150	7.2	1%	Jul 8	A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 before 6.8.9; 6.9.0 before 6.9.6
CVE-2021-26680	7.2	3%	Feb 23	A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5; 6.7.14; 6.8.8
CVE-2021-26679	7.2	3%	Feb 23	A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5; 6.7.14; 6.8.8
CVE-2021-26684	7.2	3%	Feb 23	A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: through 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5
CVE-2021-26683	7.2	3%	Feb 23	A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: through 6.7.14; 6.8.0 through 6.8.8; 6.9.0 before 6.9.5
CVE-2021-26681	7.2	3%	Feb 23	A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.7; 6.9.0 before 6.9.2
CVE-2020-7117	7.2	3%	Jun 3	The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution Affected: 6.7.0 through 6.7.13; 6.8.0 before 6.8.6; 6.9.0 before 6.9.1
CVE-2020-7116	7.2	3%	Jun 3	The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution Affected: 6.7.0 through 6.7.13; 6.8.0 before 6.8.6; 6.9.0 before 6.9.1
CVE-2018-7079	7.2	1%	Dec 7	Aruba ClearPass Policy Manager guest authorization failure Affected: before 6.6.10; 6.7.0 before 6.7.6
CVE-2018-7067	7.2	1%	Dec 7	A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise Affected: before 6.6.10; 6.7.0 before 6.7.6
CVE-2018-7065	7.2	1%	Dec 7	An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation Affected: before 6.6.10; 6.7.0 before 6.7.6