Lucene search
HpeCVELIST:CVE-2021-26678HistoryFeb 23, 2021 - 5:52 p.m.
CVE-2021-26678
2021-02-2317:52:49
hpe
www.cve.org
1
0.002 Low
EPSS
Percentile
51.6%
A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface.
CNA Affected
[
{
"product": "Aruba ClearPass Policy Manager",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1"
}
]
}
]Related
prion
prion
Cross site scripting
2021-02-23 18:15:00
nvd
nvd
CVE-2021-26678
2021-02-23 18:15:13
cve
cve
CVE-2021-26678
2021-02-23 18:15:13