CVE-2021-29145

A remote server side request forgery SSRF remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

Design/Logic Flaw

A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29146

A remote cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29142

A remote cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29142

Aruba ClearPass Policy Manager is affected by CVE-2021-29142, a remote XSS vulnerability in the web interface for versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1. The issue arises from insufficient validation of client-supplied data in the WEB application, enabling a remote attacker to execute cli...

CVE-2021-29147

Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1 contain a remote arbitrary command execution vulnerability. The CVE-2021-29147 issue has been confirmed across multiple sources (NVD, Red Hat, CNVD/CNNVD, CVE records) and Aruba has released patches addressing the vulne...

CVE-2021-29147

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29144

A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29144

Aruba ClearPass Policy Manager Vulnerability (CVE-2021-29144) affects version(s) prior to 6.9.5, 6.8.9, and 6.7.14‑HF1. The NVD and Red Hat entries describe a remote information disclosure vulnerability in the web interface that could allow attackers to obtain sensitive data. Aruba has released p...

CVE-2021-29145

Aruba ClearPass Policy Manager is affected by CVE-2021-29145, an SSRF-based remote code execution vulnerability in the product’s server-side functionality. Versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1 are impacted. Aruba has released patches addressing this vulnerability. The risk context from ...

CVE-2021-29146

The CVE-2021-29146 entry describes a remote cross-site scripting (XSS) vulnerability in Aruba ClearPass Policy Manager, affecting versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1. The issue stems from insufficient validation of client-side data by the WEB application, enabling injection of maliciou...

Aruba ClearPass Policy Manager 操作系统命令注入漏洞

Aruba ClearPass Policy Manager is an application that provides a wireless network security access management system. An operating system command injection vulnerability exists in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.9, and 6.7.14-HF1, which can be exploited by a remote...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is an application that provides a wireless network security access management system. An information disclosure vulnerability exists in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.9, 6.7.14-HF1, which can be exploited by a remote attacker to submit a...

Aruba ClearPass Policy Manager 跨站脚本漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks. a cross-site scripting vulnerability exists in Aruba ClearPass Policy Manager, which stems from the lack of proper validation of client data by the WEB...

F5 BIG-IP APM 访问控制错误漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. An Access Control Error vulnerability exists in BIG-IP APM that stems from improper access restriction. The following products and versions ar...

Aruba ClearPass Policy Manager 跨站脚本漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A cross-site scripting vulnerability exists in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1, which stems from a lack of proper...

Aruba ClearPass Policy Manager 代码问题漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. An XML external entity injection vulnerability exists in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1. The vulnerability stems fro...

F5 BIG-IP APM 授权问题漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. An authorization issue vulnerability exists in BIG-IP APM that stems from an error when processing authentication requests. The following...

CVE-2020-7123

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...