Hewlett Packard Enterprise Aruba Clearpass
4 CVEs affecting Hewlett Packard Enterprise Aruba Clearpass. Latest disclosed: 2018-08-06. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7058 | Critical | 9.8 | 2018-08-06 | Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to ga… |
CVE-2018-7060 | High | 8.8 | 2018-08-06 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authen… |
CVE-2017-9001 | High | 8.1 | 2018-08-06 | Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When… |
CVE-2017-9002 | Medium | 6.1 | 2018-08-06 | All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can tr… |