Aruba Clearpass Policy Manager (Hewlett Packard Enterprise Hpe) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-02-27. Vendor: Hewlett Packard Enterprise Hpe.

CVEs of Aruba Clearpass Policy Manager

• CVE-2024-26302 - CVSS 4.8 (medium), 2024-02-27: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
• CVE-2024-26301 - CVSS 6.5 (medium), 2024-02-27: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
• CVE-2024-26300 - CVSS 6.6 (medium), 2024-02-27: A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)…
• CVE-2024-26296 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2024-26299 - CVSS 6.6 (medium), 2024-02-27: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site…
• CVE-2024-26295 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2024-26298 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2024-26297 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2024-26294 - CVSS 8.8 (high), 2024-02-27: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2023-43509 - CVSS 5.8 (medium), 2023-10-25: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to…
• CVE-2023-43510 - CVSS 6.3 (medium), 2023-10-25: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying…
• CVE-2023-43506 - CVSS 7.8 (high), 2023-10-25: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher…
• CVE-2023-43508 - CVSS 6.5 (medium), 2023-10-25: Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change…
• CVE-2023-43507 - CVSS 8.8 (high), 2023-10-25: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
• CVE-2023-25591 - CVSS 7.6 (high), 2023-03-22: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
• CVE-2023-25594 - CVSS 8.8 (high), 2023-03-22: A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change…
• CVE-2023-25593 - CVSS 7.1 (high), 2023-03-22: Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site…
• CVE-2023-25596 - CVSS 4.9 (medium), 2023-03-22: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext…
• CVE-2023-25592 - CVSS 7.1 (high), 2023-03-22: Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site…
• CVE-2023-25595 - CVSS 5.5 (medium), 2023-03-22: A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive…
• CVE-2023-25590 - CVSS 7.8 (high), 2023-03-22: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher…
• CVE-2023-25589 - CVSS 9.8 (critical), 2023-03-22: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on…
• CVE-2022-43540 - CVSS 5.5 (medium), 2023-01-05: A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive…
• CVE-2022-43536 - CVSS 8.8 (high), 2023-01-05: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2022-43539 - CVSS 5.7 (medium), 2023-01-05: A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially…
• CVE-2022-43535 - CVSS 7.8 (high), 2023-01-05: A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful…
• CVE-2022-43538 - CVSS 7.2 (high), 2023-01-05: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2022-43534 - CVSS 7.8 (high), 2023-01-05: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit…
• CVE-2022-43537 - CVSS 7.2 (high), 2023-01-05: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying…
• CVE-2022-43530 - CVSS 8.8 (high), 2023-01-05: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…
• CVE-2022-43533 - CVSS 7.8 (high), 2023-01-05: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit…
• CVE-2022-43532 - CVSS 8 (high), 2023-01-05: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site…
• CVE-2022-43531 - CVSS 8.8 (high), 2023-01-05: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection…