Hewlett Packard Enterprise (HPE) HPE Aruba Networking ClearPass Policy Manager
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-23599 | 6.12.0 – 6.12.7 ; 6.11.0 – 6.11.13 | Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux | HIGH 7.8 | 0.2 % | ||
| CVE-2025-37122 | 6.12.0 – 6.12.5 ; 6.11.0 – 6.11.12 | Unauthenticated Reflected Cross-Site Scripting | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-25039 | 6.12.0 – <=6.12.3 ; 6.11.0 – <=6.11.9 | Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface | HIGH 8.8 | 0.6 % | ||
| CVE-2025-23060 | 6.12.0 – <=6.12.3 ; 6.11.0 – <=6.11.9 | Sensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM) | HIGH 8.1 | 0.2 % | ||
| CVE-2025-23059 | 6.12.0 – <=6.12.3 ; 6.11.0 – <=6.11.9 | Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager | MEDIUM 6.8 | 0.6 % | ||
| CVE-2025-23058 | 6.12.0 – <=6.12.3 ; 6.11.0 – <=6.11.9 | Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface | HIGH 8.8 | 0.7 % | ||
| CVE-2024-53672 | 6.12.0 – 6.12.2 ; 6.11.0 – 6.11.9 | Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface | MEDIUM 6.3 | 0.4 % | ||
| CVE-2024-51773 | 6.12.0 – 6.12.2 ; 6.11.0 – 6.11.9 | Authenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-51772 | 6.12.0 – 6.12.2 ; 6.11.0 – 6.11.9 | Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execut… | HIGH 8.0 | 0.5 % | ||
| CVE-2024-51771 | 6.12.0 – 6.12.2 ; 6.11.0 – 6.11.9 | Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface | HIGH 8.8 | 0.8 % |