Clearpass Policy Manager (Arubanetworks) - vulnerabilities (CVEs)

136 CVEs, 0 in the last 30 days, 130 known versions, newest CVE from 2025-02-04. Vendor: Arubanetworks.

CVEs of Clearpass Policy Manager

CVE-2025-25039 - CVSS 8.8 (high), 2025-02-04: A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run…
CVE-2025-23060 - CVSS 8.1 (high), 2025-02-04: A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this…
CVE-2025-23059 - CVSS 6.8 (medium), 2025-02-04: A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information.…
CVE-2025-23058 - CVSS 8.8 (high), 2025-02-04: A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain…
CVE-2024-53672 - CVSS 6.3 (medium), 2024-12-03: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying…
CVE-2024-51773 - CVSS 5.4 (medium), 2024-12-03: A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a…
CVE-2024-51772 - CVSS 8 (high), 2024-12-03: An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands…
CVE-2024-51771 - CVSS 8.8 (high), 2024-12-03: A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to…
CVE-2024-5486 - CVSS 5.8 (medium), 2024-07-30: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext…
CVE-2024-41916 - CVSS 6.8 (medium), 2024-07-30: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext…
CVE-2024-41915 - CVSS 8.8 (high), 2024-07-30: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2024-26302 - CVSS 4.8 (medium), 2024-02-27: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
CVE-2024-26301 - CVSS 6.5 (medium), 2024-02-27: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
CVE-2024-26300 - CVSS 6.6 (medium), 2024-02-27: A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)…
CVE-2024-26296 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2024-26299 - CVSS 6.6 (medium), 2024-02-27: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site…
CVE-2024-26295 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2024-26298 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2024-26297 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2024-26294 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2023-43510 - CVSS 6.3 (medium), 2023-10-25: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying…
CVE-2023-43509 - CVSS 5.8 (medium), 2023-10-25: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to…
CVE-2023-43506 - CVSS 7.8 (high), 2023-10-25: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher…
CVE-2023-43508 - CVSS 6.5 (medium), 2023-10-25: Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change…
CVE-2023-43507 - CVSS 8.8 (high), 2023-10-25: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2023-25591 - CVSS 7.6 (high), 2023-03-22: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
CVE-2023-25594 - CVSS 8.8 (high), 2023-03-22: A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change…
CVE-2023-25593 - CVSS 7.1 (high), 2023-03-22: Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site…
CVE-2023-25596 - CVSS 4.9 (medium), 2023-03-22: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext…
CVE-2023-25592 - CVSS 7.1 (high), 2023-03-22: Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site…
CVE-2023-25595 - CVSS 5.5 (medium), 2023-03-22: A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive…
CVE-2023-25590 - CVSS 7.8 (high), 2023-03-22: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher…
CVE-2023-25589 - CVSS 9.8 (critical), 2023-03-22: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on…
CVE-2022-43540 - CVSS 5.5 (medium), 2023-01-05: A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive…
CVE-2022-43537 - CVSS 7.2 (high), 2023-01-05: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-43536 - CVSS 8.8 (high), 2023-01-05: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-43539 - CVSS 5.7 (medium), 2023-01-05: A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially…
CVE-2022-43535 - CVSS 7.8 (high), 2023-01-05: A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful…
CVE-2022-43538 - CVSS 7.2 (high), 2023-01-05: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-43534 - CVSS 7.8 (high), 2023-01-05: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit…
CVE-2022-43530 - CVSS 8.8 (high), 2023-01-05: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-43533 - CVSS 7.8 (high), 2023-01-05: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit…
CVE-2022-43532 - CVSS 8 (high), 2023-01-05: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site…
CVE-2022-43531 - CVSS 8.8 (high), 2023-01-05: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-23685 - CVSS 8.8 (high), 2022-09-20: A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery…
CVE-2022-23694 - CVSS 8.8 (high), 2022-09-20: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-23693 - CVSS 8.8 (high), 2022-09-20: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-23696 - CVSS 8.8 (high), 2022-09-20: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-23692 - CVSS 8.8 (high), 2022-09-20: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-23695 - CVSS 8.8 (high), 2022-09-20: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
CVE-2022-37882 - CVSS 7.2 (high), 2022-09-20: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-37878 - CVSS 7.2 (high), 2022-09-20: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-37881 - CVSS 7.2 (high), 2022-09-20: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-37884 - CVSS 7.5 (high), 2022-09-20: A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which…
CVE-2022-37877 - CVSS 7.8 (high), 2022-09-20: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit…
CVE-2022-37880 - CVSS 7.2 (high), 2022-09-20: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-37883 - CVSS 7.2 (high), 2022-09-20: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-37879 - CVSS 7.2 (high), 2022-09-20: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
CVE-2022-23674 - CVSS 5.4 (medium), 2022-05-17: A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9…
CVE-2022-23671 - CVSS 7.5 (high), 2022-05-17: A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23675 - CVSS 4.8 (medium), 2022-05-17: A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9…
CVE-2022-23669 - CVSS 8.8 (high), 2022-05-17: A remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and…
CVE-2022-23673 - CVSS 7.2 (high), 2022-05-17: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23672 - CVSS 7.2 (high), 2022-05-17: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23670 - CVSS 6.5 (medium), 2022-05-16: A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23668 - CVSS 4.9 (medium), 2022-05-16: A remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9…
CVE-2022-23667 - CVSS 7.2 (high), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23665 - CVSS 9.1 (critical), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23658 - CVSS 10 (critical), 2022-05-16: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and…
CVE-2022-23661 - CVSS 9.1 (critical), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23664 - CVSS 9.1 (critical), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23657 - CVSS 10 (critical), 2022-05-16: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and…
CVE-2022-23660 - CVSS 10 (critical), 2022-05-16: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and…
CVE-2022-23663 - CVSS 9.1 (critical), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23666 - CVSS 9.1 (critical), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23659 - CVSS 6.1 (medium), 2022-05-16: A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2022-23662 - CVSS 9.1 (critical), 2022-05-16: A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,…
CVE-2021-40994 - CVSS 6.3 (medium), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-40997 - CVSS 9.8 (critical), 2021-10-15: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-40993 - CVSS 8.1 (high), 2021-10-15: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-40996 - CVSS 9.8 (critical), 2021-10-15: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-40991 - CVSS 7.2 (high), 2021-10-15: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior…
CVE-2021-40995 - CVSS 6.3 (medium), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-40998 - CVSS 7.2 (high), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-40992 - CVSS 7.2 (high), 2021-10-15: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-40987 - CVSS 7.2 (high), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-40990 - CVSS 6.5 (medium), 2021-10-15: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior…
CVE-2021-40989 - CVSS 7.8 (high), 2021-10-15: A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-40988 - CVSS 7.2 (high), 2021-10-15: A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-37738 - CVSS 7.5 (high), 2021-10-15: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior…
CVE-2021-40986 - CVSS 7.2 (high), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-37739 - CVSS 7.2 (high), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-37737 - CVSS 8.8 (high), 2021-10-15: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-37736 - CVSS 9.8 (critical), 2021-10-15: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
CVE-2021-40999 - CVSS 7.2 (high), 2021-10-15: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to…
CVE-2021-34616 - CVSS 6.3 (medium), 2021-07-08: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has…
CVE-2021-34613 - CVSS 6.3 (medium), 2021-07-08: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has…
CVE-2021-34612 - CVSS 6.3 (medium), 2021-07-08: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has…
CVE-2021-34615 - CVSS 6.3 (medium), 2021-07-08: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has…
CVE-2021-34609 - CVSS 8.8 (high), 2021-07-08: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates…