Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

136 records

Priority LOW 39

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00647 Published 2025-02-04 No fix listed CWE-78
Priority MEDIUM 41

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions th…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00724 Published 2025-02-04 No fix listed CWE-1390
Priority MEDIUM 41

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00547 Published 2024-07-30 No fix listed CWE-89
Priority LOW 29

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the i…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00358 Published 2024-02-27 No fix listed CWE-79
Priority LOW 33

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00772 Published 2023-10-24 No fix listed CWE-79
Priority LOW 29

Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00468 Published 2023-10-24 No fix listed CWE-863
Priority MEDIUM 48

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01113 Published 2023-10-24 No fix listed CWE-89
Priority LOW 36

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2023-10-24 No fix listed CWE-269
Load more