Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager
33 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-26302 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privi | MEDIUM 4.8 | 0.4 % | ||
| CVE-2024-26301 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privi | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-26300 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-si | MEDIUM 6.6 | 0.4 % | ||
| CVE-2024-26299 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a | MEDIUM 6.6 | 0.4 % | ||
| CVE-2024-26298 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 8.8 | 0.9 % | ||
| CVE-2024-26297 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 8.8 | 0.9 % | ||
| CVE-2024-26296 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 8.8 | 0.9 % | ||
| CVE-2024-26295 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 8.8 | 0.9 % | ||
| CVE-2024-26294 | ClearPass Policy Manager 6.12.x: 6.12.0 ; ClearPass Policy Manager 6.11.x: 6.11.6 and below ; ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below ; … | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 8.8 | 0.9 % | ||
| CVE-2023-43510 | ClearPass Policy Manager 6.11.x: 6.11.4 and below – <=6.11.4 ; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below ; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below | Authenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System Compromise | MEDIUM 6.3 | 0.8 % | ||
| CVE-2023-43509 | ClearPass Policy Manager 6.11.x: 6.11.4 and below – <=6.11.4 ; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below ; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below | Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications | MEDIUM 5.8 | 0.8 % | ||
| CVE-2023-43508 | ClearPass Policy Manager 6.11.x: 6.11.4 and below – <=6.11.4 ; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below ; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below | Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-43507 | ClearPass Policy Manager 6.11.x: 6.11.4 and below – <=6.11.4 ; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below ; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface | HIGH 8.8 | 1.1 % | ||
| CVE-2023-43506 | ClearPass Policy Manager 6.11.x: 6.11.4 and below – <=6.11.4 ; ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and below ; ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and below | Local Privilege Escalation in ClearPass OnGuard Linux Agent | HIGH 7.8 | 0.2 % | ||
| CVE-2023-25596 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Authenticated Sensitive Information Disclosure in ClearPass Policy Manager | MEDIUM 4.9 | 0.3 % | ||
| CVE-2023-25595 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-25594 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface | HIGH 8.8 | 0.5 % | ||
| CVE-2023-25593 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface | HIGH 7.1 | 0.5 % | ||
| CVE-2023-25592 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface | HIGH 7.1 | 0.5 % | ||
| CVE-2023-25591 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Authenticated Information Disclosure in ClearPass Policy Manager Web-Based Management Interface | HIGH 7.6 | 0.6 % | ||
| CVE-2023-25590 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Local Privilege Escalation in ClearPass OnGuard Linux Agent | HIGH 7.8 | 0.2 % | ||
| CVE-2023-25589 | 6.11.1 and below ; 6.10.8 and below ; 6.9.13 and below | Unauthenticated Arbitrary User Creation Leads to Complete System Compromise | CRITICAL 9.8 | 1.0 % | ||
| CVE-2022-43540 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obta | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-43539 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to | MEDIUM 5.7 | 0.3 % | ||
| CVE-2022-43538 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 7.2 | 1.5 % | ||
| CVE-2022-43537 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 7.2 | 1.5 % | ||
| CVE-2022-43536 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on | HIGH 8.8 | 1.4 % | ||
| CVE-2022-43535 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A | HIGH 7.8 | 0.2 % | ||
| CVE-2022-43534 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A suc | HIGH 7.8 | 0.2 % | ||
| CVE-2022-43533 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A suc | HIGH 7.8 | 0.2 % | ||
| CVE-2022-43532 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a | HIGH 8.0 | 0.4 % | ||
| CVE-2022-43531 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ | HIGH 8.8 | 0.8 % | ||
| CVE-2022-43530 | ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ | HIGH 8.8 | 1.0 % |