What is CVE-2022-43531?

CVE-2022-43531 is a high-severity vulnerability in Arubanetworks Clearpass_policy_manager, classified under SQL Injection. CVSS score: 8.8/10. Published 2023-01-05.

How severe is CVE-2022-43531?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Arubanetworks Clearpass_policy_manager

CVE-2022-43531

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these…

Vulnerability class: SQL Injection

EPSS: 0.008 (52.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Arubanetworks Clearpass_policy_manager
Hewlett Packard Enterprise (Hpe) Aruba Clearpass Policy Manager — versions ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security-alert@hpe.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-43531?: CVE-2022-43531 is a high-severity vulnerability in Arubanetworks Clearpass_policy_manager, classified under SQL Injection. CVSS score: 8.8/10. Published 2023-01-05.
How severe is CVE-2022-43531?: High severity. CVSS v3 base score is 8.8 out of 10.