Aruba Clearpass Policy Manager (Hp) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2018-08-06. Vendor: Hp.
CVEs of Aruba Clearpass Policy Manager
- CVE-2017-9002 - CVSS 6.1 (medium), 2018-08-06: All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can…
- CVE-2018-7059 - CVSS 8.8 (high), 2018-08-06: Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could…
- CVE-2017-9001 - CVSS 8.1 (high), 2018-08-06: Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH.…
- CVE-2018-7058 - CVSS 9.8 (critical), 2018-08-06: Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to…
- CVE-2018-5390 - CVSS 7.5 (high), 2018-08-06: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which…
- CVE-2017-5825 - CVSS 8.8 (high), 2018-02-15: A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- CVE-2017-5828 - CVSS 8.1 (high), 2018-02-15: An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- CVE-2017-5824 - CVSS 9.8 (critical), 2018-02-15: An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- CVE-2017-5827 - CVSS 5.4 (medium), 2018-02-15: A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- CVE-2017-5826 - CVSS 8.8 (high), 2018-02-15: An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- CVE-2017-5829 - CVSS 7.8 (high), 2018-02-15: An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
