Hewlett Packard Enterprise Aruba Clearpass Policy Manager
11 CVEs affecting Hewlett Packard Enterprise Aruba Clearpass Policy Manager. Latest disclosed: 2018-12-07. Critical: 2, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5824 | Critical | 9.8 | 2018-02-15 | An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2018-7066 | Critical | 9.0 | 2018-12-07 | An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators… |
CVE-2017-5826 | High | 8.8 | 2018-02-15 | An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5825 | High | 8.8 | 2018-02-15 | A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2018-7063 | High | 8.1 | 2018-12-07 | In Aruba ClearPass, disabled API admins can still perform read/write operations. In certain circumstances, API admins in ClearPass which have been disabled may… |
CVE-2017-5828 | High | 8.1 | 2018-02-15 | An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5829 | High | 7.8 | 2018-02-15 | An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2018-7079 | High | 7.2 | 2018-12-07 | Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, w… |
CVE-2018-7067 | High | 7.2 | 2018-12-07 | A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass coul… |
CVE-2018-7065 | High | 7.2 | 2018-12-07 | An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by mult… |
CVE-2017-5827 | Medium | 5.4 | 2018-02-15 | A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |