Hewlett Packard Enterprise Aruba ClearPass
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-7060 | 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could m | HIGH 8.8 | 0.5 % | ||
| CVE-2018-7058 | 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 | Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this | CRITICAL 9.8 | 3.9 % | ||
| CVE-2017-9002 | All versions prior to v6.6.8 | All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an | MEDIUM 6.1 | 0.9 % | ||
| CVE-2017-9001 | All versions prior to 6.6.8 | Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failure | HIGH 8.1 | 7.3 % |