Priority LOW 39
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00647 · Published 2025-02-04 · No fix listed CWE-78
Priority LOW 37
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00232 · Published 2025-02-04 · No fix listed CWE-319
Priority LOW 33
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00598 · Published 2025-02-04 · No fix listed CWE-22
Priority MEDIUM 41
A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions th…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00724 · Published 2025-02-04 · No fix listed CWE-1390
Priority LOW 28
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.0041 · Published 2024-12-03 · No fix listed CWE-77
Priority LOW 24
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting (XSS) attack.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2024-12-03 · No fix listed CWE-79
Priority LOW 37
An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.0046 · Published 2024-12-03 · No fix listed CWE-77
Priority MEDIUM 41
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00763 · Published 2024-12-03 · No fix listed CWE-77
Priority LOW 30
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00362 · Published 2024-07-30 · No fix listed
Priority MEDIUM 41
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00547 · Published 2024-07-30 · No fix listed CWE-89
Priority LOW 26
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format.
CVSS 3.1MEDIUM 5.8· Network · High privileges · No interaction · EPSS 0.00335 · Published 2024-07-30 · No fix listed
Priority LOW 22
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00354 · Published 2024-02-27 · No fix listed CWE-276
Priority LOW 29
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00516 · Published 2024-02-27 · No fix listed
Priority LOW 29
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00358 · Published 2024-02-27 · No fix listed CWE-79
Priority LOW 29
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the i…
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00358 · Published 2024-02-27 · No fix listed CWE-79
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00924 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00924 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00924 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00928 · Published 2024-02-27 · No fix listed CWE-77
Priority MEDIUM 42
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00928 · Published 2024-02-27 · No fix listed CWE-77
Priority LOW 29
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00797 · Published 2023-10-24 · No fix listed CWE-77
Priority LOW 33
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00772 · Published 2023-10-24 · No fix listed CWE-79
Priority LOW 29
Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00468 · Published 2023-10-24 · No fix listed CWE-863
Priority MEDIUM 48
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01113 · Published 2023-10-24 · No fix listed CWE-89
Priority LOW 36
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2023-10-24 · No fix listed CWE-269
Load more