2122 matches found
Aruba Networks CPPM Cross-Site Scripting Vulnerability (CNVD-2015-03509)
Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by remote administrators to inject arbitrary web script or...
Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting
=============================================================================== title: ClearPass Policy Manager Stored XSS case id: CM-2014-01 product: Aruba ClearPass Policy Manager vulnerability type: Stored cross-site script severity: Medium found: 2014-11-24 by: Cristiano Maruti @cmaruti...
CVE-2015-4132
Multiple cross-site scripting XSS vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1551
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors...
CVE-2015-1392
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-1389
Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...
Directory traversal
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...
Sql injection
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...
Code injection
Aruba Networks ClearPass Policy Manager CPPM before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors...
Directory traversal
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6628
Aruba Networks ClearPass Policy Manager CPPM before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors...
CVE-2015-1389
Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...
CVE-2015-1392
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-1551
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors...
CVE-2015-4132
Multiple cross-site scripting XSS vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1392
Aruba Networks CPPM (ClearPass Policy Manager) is affected by CVE-2015-1392. The connected sources describe multiple SQL injection vulnerabilities in CPPM prior to version 6.4.5 that allow remote administrators to execute arbitrary SQL commands via unspecified vectors. The root cause is SQL injec...