CP
Product
Clearpass Policy Manager
On CISA KEVExploited in the wildRansomware-linked
136
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 71Medium 40Low 0
Watch
Add Clearpass Policy Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-34616 | 6.3 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-34615 | 6.3 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-34613 | 6.3 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-34612 | 6.3 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2021-34614 | 6.3 | Jul 8 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2023-25593 | 6.1 | Mar 22 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack… Affected: 6.9.0 through 6.9.13; 6.10.0 through 6.10.8; 6.11.0; 6.11.1 |
| CVE-2023-25592 | 6.1 | Mar 22 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack… Affected: 6.9.0 through 6.9.13; 6.10.0 through 6.10.8; 6.11.0; 6.11.1 |
| CVE-2022-23659 | 6.1 | May 16 | A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below,… Affected: before 6.8.9; 6.9.0 before 6.9.10; 6.10.0 before 6.10.5; 6.8.9; 6.8.9; 6.8.9 |
| CVE-2021-26682 | 6.1 | Feb 23 | A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.5; 6.7.14; 6.8.8 |
| CVE-2021-26678 | 6.1 | Feb 23 | A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.7.14; 6.8.0 before 6.8.6; 6.9.0 before 6.9.2 |
| CVE-2023-43509 | 5.8 | Oct 25 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that… Affected: before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.4; 6.9.13; 6.9.13; 6.9.13; +3 more |
| CVE-2023-25595 | 5.5 | Mar 22 | A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information Affected: 6.9.0 through 6.9.13; 6.10.0 through 6.10.8; 6.11.0; 6.11.1 |
| CVE-2022-43540 | 5.5 | Jan 5 | A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2024-51773 | 5.4 | Dec 3 | Authenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface Affected: 6.11.0 before 6.11.10; 6.12.0 before 6.12.3 |
| CVE-2022-23674 | 5.4 | May 17 | A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2… Affected: through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 through 6.9.9; 6.10.0 through 6.10.4; 6.8.9; 6.8.9; +1 more |
| CVE-2020-7120 | 5.3 | Feb 23 | A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 Affected: before 6.8.8; 6.9.0 before 6.9.3 |
| CVE-2025-23059 | 4.9 | Feb 4 | Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager Affected: 6.11.0 before 6.11.10; 6.12.0 before 6.12.4 |
| CVE-2024-5486 | 4.9 | Jul 30 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format Affected: 6.11 through 6.11.8; 6.12.0; 6.12.1 |
| CVE-2024-41916 | 4.9 | Jul 30 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format Affected: through 6.11.8; 6.12.0; 6.12.1 |
| CVE-2023-25596 | 4.9 | Mar 22 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format Affected: 6.9.0 through 6.9.13; 6.10.0 through 6.10.8; 6.11.0; 6.11.1 |
| CVE-2022-23668 | 4.9 | May 16 | A remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2… Affected: before 6.8.9; 6.9.0 before 6.9.10; 6.10.0 before 6.10.5; 6.8.9; 6.8.9; 6.8.9 |
| CVE-2024-26302 | 4.8 | Feb 27 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information Affected: 6.9.0 before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.6; 6.9.13; 6.9.13; 6.9.13; +6 more |
| CVE-2024-26300 | 4.8 | Feb 27 | A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an… Affected: 6.9.0 before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.6; 6.9.13; 6.9.13; 6.9.13; +6 more |
| CVE-2024-26299 | 4.8 | Feb 27 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 6.9.0 before 6.9.13; 6.10.0 before 6.10.8; 6.11.0 through 6.11.6; 6.9.13; 6.9.13; 6.9.13; +6 more |
| CVE-2022-43532 | 4.8 | Jan 5 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2022-23675 | 4.8 | May 17 | A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2… Affected: through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 through 6.9.9; 6.10.0 through 6.10.4; 6.8.9; 6.8.9; +1 more |
| CVE-2022-43539 | 4.5 | Jan 5 | A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive… Affected: 6.9.0 before 6.9.12; 6.10.0 before 6.10.7 |
| CVE-2021-29151 | 4.3 | Jul 8 | A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9 Affected: 6.6.0 through 6.6.10; 6.7.0 through 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.6 |
| CVE-2015-4132 | – | May 28 | Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to inject arbitrary web script or… Affected: through 6.4.4 |
| CVE-2015-1551 | – | May 28 | Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors Affected: through 6.4.3 |
| CVE-2015-1550 | – | May 28 | Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors Affected: through 6.4.4 |
| CVE-2015-1392 | – | May 28 | Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified… Affected: through 6.4.4 |
| CVE-2015-1389 | – | May 28 | Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the… Affected: through 6.4.4 |
| CVE-2014-6628 | – | May 28 | Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors Affected: through 6.4.5 |
| CVE-2014-8367 | – | Nov 25 | SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL… Affected: 6.2.0 through 6.2.6; 6.3.0 before 6.3.6; 6.4.0 before 6.4.2; 6.2 |
| CVE-2014-2593 | – | Aug 29 | The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a… Affected: 6.3.0.60730 |