CL
Product
Clearpass
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 9Low 0
Watch
Add Clearpass to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29141 | 6.5 | Apr 29 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.5 |
| CVE-2021-29138 | 6.5 | Apr 29 | A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.5; 6.8.0 before 6.8.1 |
| CVE-2021-29144 | 6.5 | Apr 29 | A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.5 |
| CVE-2018-0489 | 6.5 | Feb 27 | Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows… Affected: 6.6.0 through 6.6.9; 6.7.0 before 6.7.2 |
| CVE-2021-29146 | 5.4 | Apr 29 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.5; 6.7.14 |
| CVE-2020-7113 | 4.9 | Apr 16 | A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting… Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
| CVE-2021-29139 | 4.8 | Apr 29 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.5; 6.7.14 |
| CVE-2021-29142 | 4.8 | Apr 29 | A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1 Affected: 6.7.0 before 6.7.14; 6.8.0 before 6.8.9; 6.9.0 before 6.9.5; 6.7.14 |
| CVE-2020-7110 | 4.8 | Apr 16 | ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass… Affected: 6.7.0 before 6.7.13; 6.8.0 before 6.8.4 |
Showing 9