Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

136 records in Clearpass Policy Manager · all components

Priority CRITICAL 100KEV

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2017-03-11 Fixed in 2.3.32, 2.5.10.1 CWE-755
Priority HIGH 78

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.64596 Published 2020-06-03 No fix listed CWE-306
Priority MEDIUM 48

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01113 Published 2023-10-24 No fix listed CWE-89
Priority MEDIUM 44

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02202 Published 2022-05-16 No fix listed CWE-78
Priority MEDIUM 44

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02202 Published 2022-05-16 No fix listed CWE-78
Priority MEDIUM 44

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02202 Published 2022-05-16 No fix listed CWE-78
Priority MEDIUM 44

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02202 Published 2022-05-16 No fix listed CWE-78
Priority MEDIUM 44

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02202 Published 2022-05-16 No fix listed CWE-78
Priority MEDIUM 44

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02202 Published 2022-05-16 No fix listed CWE-78
Load more
Open these records in search →