Hewlett Packard Enterprise (HPE) Aruba Clearpass Policy Manager
33 CVEs affecting Hewlett Packard Enterprise (HPE) Aruba Clearpass Policy Manager. Latest disclosed: 2024-02-27. Critical: 1, High: 20.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25589 | Critical | 9.8 | 2023-03-22 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on t… |
CVE-2022-43531 | High | 8.8 | 2023-01-05 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attack… |
CVE-2022-43530 | High | 8.8 | 2023-01-05 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2022-43532 | High | 8.0 | 2023-01-05 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site… |
CVE-2023-43506 | High | 7.8 | 2023-10-25 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role… |
CVE-2023-25590 | High | 7.8 | 2023-03-22 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role… |
CVE-2022-43535 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit… |
CVE-2022-43534 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit cou… |
CVE-2022-43533 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit co… |
CVE-2023-25591 | High | 7.6 | 2023-03-22 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sen… |
CVE-2024-26298 | High | 7.2 | 2024-02-27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2024-26297 | High | 7.2 | 2024-02-27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2024-26296 | High | 7.2 | 2024-02-27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2024-26295 | High | 7.2 | 2024-02-27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2024-26294 | High | 7.2 | 2024-02-27 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2023-43507 | High | 7.2 | 2023-10-25 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2022-43538 | High | 7.2 | 2023-01-05 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2022-43537 | High | 7.2 | 2023-01-05 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2022-43536 | High | 7.2 | 2023-01-05 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2023-25593 | High | 7.1 | 2023-03-22 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting… |