Cross site scripting

2022-05-1719:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

CPENameOperatorVersion
clearpass_policy_managerle6.7.14
clearpass_policy_managerge6.8.0
clearpass_policy_managerlt6.8.9
clearpass_policy_managereq6.8.9
clearpass_policy_managerge6.9.0
clearpass_policy_managerle6.9.9
clearpass_policy_managerge6.10.0
clearpass_policy_managerle6.10.4
clearpass_policy_managereq6.8.9 hotfix1
clearpass_policy_managereq6.8.9 hotfix2

Name	Operator	Version
clearpass_policy_manager	le	6.7.14
clearpass_policy_manager	ge	6.8.0
clearpass_policy_manager	lt	6.8.9
clearpass_policy_manager	eq	6.8.9
clearpass_policy_manager	ge	6.9.0
clearpass_policy_manager	le	6.9.9
clearpass_policy_manager	ge	6.10.0
clearpass_policy_manager	le	6.10.4
clearpass_policy_manager	eq	6.8.9 hotfix1
clearpass_policy_manager	eq	6.8.9 hotfix2

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt