CL
Product
Clearpass
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 9Low 0
Watch
Add Clearpass to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29147 | 8.8 | Apr 29 | A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.8; 6.9.0 before 6.9.4; 6.7.14 |
| CVE-2018-7060 | 8.8 | Aug 6 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users Affected: 6.6.0 before 6.6.9; 6.7.0 before 6.7.1 |
| CVE-2015-3655 | 8.8 | Aug 29 | Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication… Affected: 6.4.0 before 6.4.7; 6.5.0 before 6.5.2 |
| CVE-2021-29140 | 8.2 | Apr 29 | A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2020-7111 | 7.2 | Apr 16 | A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2015-4649 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3657 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3656 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3654 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2015-3653 | 7.2 | Aug 29 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating… Affected: through 6.4.6; 6.5; 6.5.1 |
| CVE-2014-2071 | 7.1 | Jan 8 | Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single… Affected: 6.1 through 6.1.4; 6.2 before 6.2.5.61640; 6.3 before 6.3.0.61712; 6.1 through 6.1.4 |
Showing 11