AC
Product
Aruba ClearPass Policy Manager
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 17Medium 15Low 0
Watch
Add Aruba ClearPass Policy Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-26298 | 8.8 | Feb 27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.12.x: 6.12.0; ClearPass Policy Manager 6.11.x: 6.11.6 and below; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below; ClearPass Policy Manager 6.9.x: ClearPass 6.9.13 Hotfix Q4 2023 for Security issues and below |
| CVE-2024-26297 | 8.8 | Feb 27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.12.x: 6.12.0; ClearPass Policy Manager 6.11.x: 6.11.6 and below; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below; ClearPass Policy Manager 6.9.x: ClearPass 6.9.13 Hotfix Q4 2023 for Security issues and below |
| CVE-2024-26296 | 8.8 | Feb 27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.12.x: 6.12.0; ClearPass Policy Manager 6.11.x: 6.11.6 and below; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below; ClearPass Policy Manager 6.9.x: ClearPass 6.9.13 Hotfix Q4 2023 for Security issues and below |
| CVE-2024-26295 | 8.8 | Feb 27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.12.x: 6.12.0; ClearPass Policy Manager 6.11.x: 6.11.6 and below; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below; ClearPass Policy Manager 6.9.x: ClearPass 6.9.13 Hotfix Q4 2023 for Security issues and below |
| CVE-2024-26294 | 8.8 | Feb 27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.12.x: 6.12.0; ClearPass Policy Manager 6.11.x: 6.11.6 and below; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below; ClearPass Policy Manager 6.9.x: ClearPass 6.9.13 Hotfix Q4 2023 for Security issues and below |
| CVE-2023-43507 | 8.8 | Oct 24 | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface Affected: ClearPass Policy Manager 6.11.x: 6.11.4 and below through <=6.11.4; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below |
| CVE-2023-25594 | 8.8 | Mar 14 | Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface Affected: 6.11.1 and below; 6.10.8 and below; 6.9.13 and below |
| CVE-2022-43536 | 8.8 | Jan 3 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2022-43531 | 8.8 | Jan 3 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the… Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2022-43530 | 8.8 | Jan 3 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the… Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2023-43506 | 7.8 | Oct 24 | Local Privilege Escalation in ClearPass OnGuard Linux Agent Affected: ClearPass Policy Manager 6.11.x: 6.11.4 and below through <=6.11.4; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below |
| CVE-2023-25590 | 7.8 | Mar 14 | Local Privilege Escalation in ClearPass OnGuard Linux Agent Affected: 6.11.1 and below; 6.10.8 and below; 6.9.13 and below |
| CVE-2022-43535 | 7.8 | Jan 3 | A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2022-43534 | 7.8 | Jan 3 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2022-43533 | 7.8 | Jan 3 | A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2022-43538 | 7.2 | Jan 3 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
| CVE-2022-43537 | 7.2 | Jan 3 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host Affected: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below |
Showing 17