Priority CRITICAL 100KEV
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to ex…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99999 · Published 2017-03-11 · Fixed in 2.3.32, 2.5.10.1 CWE-755
Priority HIGH 78
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.64596 · Published 2020-06-03 · No fix listed CWE-306
Priority MEDIUM 51
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00961 · Published 2023-03-14 · No fix listed CWE-306
Priority MEDIUM 51
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05982 · Published 2017-10-16 · No fix listed CWE-264
Priority MEDIUM 49
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03256 · Published 2022-05-16 · No fix listed
Priority MEDIUM 48
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01113 · Published 2023-10-24 · No fix listed CWE-89
Priority MEDIUM 48
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02872 · Published 2022-05-16 · No fix listed
Priority MEDIUM 48
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02872 · Published 2022-05-16 · No fix listed
Priority MEDIUM 46
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPas…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0176 · Published 2021-10-15 · No fix listed
Priority MEDIUM 46
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPas…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0176 · Published 2021-10-15 · No fix listed
Priority MEDIUM 45
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPas…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01561 · Published 2021-10-15 · No fix listed
Priority MEDIUM 45
An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices.
CVSS 3.0CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.03483 · Published 2018-12-07 · No fix listed
Priority MEDIUM 44
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02202 · Published 2022-05-16 · No fix listed CWE-78
Priority MEDIUM 44
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02202 · Published 2022-05-16 · No fix listed CWE-78
Priority MEDIUM 44
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02202 · Published 2022-05-16 · No fix listed CWE-78
Priority MEDIUM 44
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02202 · Published 2022-05-16 · No fix listed CWE-78
Priority MEDIUM 44
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02202 · Published 2022-05-16 · No fix listed CWE-78
Priority MEDIUM 44
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02202 · Published 2022-05-16 · No fix listed CWE-78
Priority MEDIUM 43
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01503 · Published 2023-01-03 · No fix listed CWE-78
Priority MEDIUM 43
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors.
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02043 · Published 2015-05-28 · No fix listed CWE-22
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00924 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00924 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00924 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00928 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00928 · Published 2024-02-27 · No fix listed CWE-77
Load more