Aruba ClearPass Policy Manager

83 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-236856.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowA vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site RHIGH 8.80.5 %
CVE-2022-236926.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQHIGH 8.81.1 %
CVE-2022-236936.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQHIGH 8.81.1 %
CVE-2022-236956.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQHIGH 8.81.1 %
CVE-2022-236946.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQHIGH 8.81.1 %
CVE-2022-23696ClearPass Policy Manager 6.10.x: 6.10.6 and below ; ClearPass Policy Manager 6.9.x: 6.9.11 and belowVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQHIGH 8.81.1 %
CVE-2022-378776.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowA vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A sucHIGH 7.80.2 %
CVE-2022-378806.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onHIGH 7.21.6 %
CVE-2022-378786.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onHIGH 7.21.5 %
CVE-2022-378796.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onHIGH 7.21.6 %
CVE-2022-378846.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowA vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operHIGH 7.50.8 %
CVE-2022-378816.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onHIGH 7.21.6 %
CVE-2022-378826.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onHIGH 7.21.6 %
CVE-2022-378836.10.x: 6.10.6 and below ; 6.9.x: 6.9.11 and belowVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onHIGH 7.21.6 %
CVE-2022-236746.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 aMEDIUM 5.40.6 %
CVE-2022-236756.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 aMEDIUM 4.80.6 %
CVE-2022-236736.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 HIGH 7.22.2 %
CVE-2022-236716.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6HIGH 7.51.3 %
CVE-2022-236726.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 HIGH 7.22.2 %
CVE-2022-236696.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, HIGH 8.81.1 %
CVE-2022-236706.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6MEDIUM 6.51.1 %
CVE-2022-236676.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 HIGH 7.21.5 %
CVE-2022-236686.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 MEDIUM 4.91.0 %
CVE-2022-236666.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 CRITICAL 9.12.2 %
CVE-2022-236656.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 CRITICAL 9.12.2 %
CVE-2022-236646.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 CRITICAL 9.12.2 %
CVE-2022-236616.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 CRITICAL 9.12.2 %
CVE-2022-236626.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 CRITICAL 9.12.2 %
CVE-2022-236636.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 CRITICAL 9.12.2 %
CVE-2022-236606.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,CRITICAL 10.02.9 %
CVE-2022-236596.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6MEDIUM 6.10.6 %
CVE-2022-236586.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,CRITICAL 10.02.9 %
CVE-2022-236576.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and belowA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,CRITICAL 10.03.3 %
CVE-2021-40998ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1HIGH 7.22.9 %
CVE-2021-40997ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prCRITICAL 9.81.8 %
CVE-2021-40995ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1MEDIUM 6.31.2 %
CVE-2021-40991ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy ManHIGH 7.21.3 %
CVE-2021-40994ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1MEDIUM 6.31.2 %
CVE-2021-40993ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6HIGH 8.11.1 %
CVE-2021-40996ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prCRITICAL 9.81.8 %
CVE-2021-40990ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy ManMEDIUM 6.51.1 %
CVE-2021-40988ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prioHIGH 7.23.9 %
CVE-2021-40989ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x pHIGH 7.80.2 %
CVE-2021-40992ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6HIGH 7.21.1 %
CVE-2021-40986ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1HIGH 7.22.9 %
CVE-2021-37739ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1HIGH 7.22.9 %
CVE-2021-40987ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1HIGH 7.22.9 %
CVE-2021-37738ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy ManHIGH 7.51.3 %
CVE-2021-37736ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prCRITICAL 9.81.6 %
CVE-2021-37737ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6HIGH 8.81.1 %
CVE-2021-40999ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.1HIGH 7.21.9 %
CVE-2021-34616Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6MEDIUM 6.31.2 %
CVE-2021-34615Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6MEDIUM 6.31.2 %
CVE-2021-34613Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6MEDIUM 6.31.2 %
CVE-2021-34612Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6MEDIUM 6.31.2 %
CVE-2021-34614Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6MEDIUM 6.31.2 %
CVE-2021-34609Prior to 6.10.0, 6.9.6 and 6.8.9A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba haHIGH 8.81.1 %
CVE-2021-34610Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6HIGH 7.23.0 %
CVE-2021-34611Prior to 6.10.0, 6.9.6 and 6.8.9A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6HIGH 7.23.0 %
CVE-2021-29152Prior to 6.10.0, 6.9.6 and 6.8.9A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9MEDIUM 6.51.2 %
CVE-2021-29151Prior to 6.10.0, 6.9.6 and 6.8.9A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. MEDIUM 4.31.0 %
CVE-2021-29150Prior to 6.10.0, 6.9.6 and 6.8.9A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.HIGH 7.21.3 %
CVE-2021-29141Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9MEDIUM 6.51.1 %
CVE-2021-29139Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-MEDIUM 4.80.5 %
CVE-2021-29138Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.MEDIUM 6.51.1 %
CVE-2021-29140Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HIGH 8.21.6 %
CVE-2021-29142Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-MEDIUM 4.80.5 %
CVE-2021-29147Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14HIGH 8.83.2 %
CVE-2021-29144Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9MEDIUM 6.51.1 %
CVE-2021-29145Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) CRITICAL 9.81.9 %
CVE-2021-29146Prior to 6.9.5, 6.8.9, 6.7.14-HF1A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-MEDIUM 5.40.5 %
CVE-2020-7123Prior to 6.9.5, 6.8.9, 6.7.14-HF1A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1.HIGH 7.80.2 %
CVE-2020-7120Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, MEDIUM 5.30.3 %
CVE-2021-26677Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8HIGH 7.80.3 %
CVE-2021-26679Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HFHIGH 7.22.5 %
CVE-2021-26680Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HFHIGH 7.22.5 %
CVE-2021-26678Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior MEDIUM 6.10.9 %
CVE-2021-26684Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HFHIGH 7.22.5 %
CVE-2021-26682Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8MEDIUM 6.10.8 %
CVE-2021-26681Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HFHIGH 7.22.5 %
CVE-2021-26683Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HFHIGH 7.22.5 %
CVE-2021-26686Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, MEDIUM 6.51.3 %
CVE-2021-26685Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, MEDIUM 6.51.2 %