Lucene search

K
cveMitreCVE-2015-4132
HistoryMay 28, 2015 - 2:59 p.m.

CVE-2015-4132

2015-05-2814:59:09
CWE-79
mitre
web.nvd.nist.gov
28
cve-2015-4132
cross-site scripting
xss
aruba networks clearpass policy manager
cppm
security vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

23.6%

Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
arubanetworksclearpass_policy_managerRange6.4.4
VendorProductVersionCPE
arubanetworksclearpass_policy_manager*cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

23.6%

Related for CVE-2015-4132