SQL Injection in Arubanetworks Clearpass Policy Manager

CVE-2014-8367

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

Affected products

Arubanetworks Clearpass_policy_manager — versions 6.2
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)