Lucene search
+L

1674 matches found

OSV
OSV
added 2021/04/28 3:15 p.m.9 views

CVE-2020-7123

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

7.8CVSS7.1AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/28 3:15 p.m.26 views

Privilege escalation

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

7.2CVSS7.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/28 2:04 p.m.37 views

CVE-2020-7123

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

7.9AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/28 2:04 p.m.57 views

CVE-2020-7123

CVE-2020-7123 describes a local privilege escalation in Aruba ClearPass Policy Manager (affected versions prior to 6.9.5, 6.8.9, 6.7.14-HF1). The vulnerability affects Aruba ClearPass Policy Manager, with patches released to address it. Connected sources (NVD/Red Hat/CNVD, etc.) confirm the produ...

7.8CVSS7.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/04/28 12:00 a.m.12 views

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.Aruba ClearPass Policy Manager has a local elevation vulnerability, and no detailed vulnerability details are available...

7.8CVSS5.5AI score0.00248EPSS
SaveExploits0References2
NCSC
NCSC
added 2021/04/21 12:00 a.m.11 views

Vulnerabilities fixed in Aruba ClearPass Policy Manager

Aruba has fixed multiple vulnerabilities in ClearPass Policy Manager. The vulnerabilities allow an unauthenticated remote malicious party potentially able to launch attacks leading to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Remote code execution...

9.8CVSS7.5AI score0.0322EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2021/04/13 6:48 a.m.112 views

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

CVE-2020-5902 Auto exploit...

10CVSS8AI score0.99999EPSS
SaveExploits62
GithubExploit
GithubExploit
added 2021/03/26 3:32 a.m.255 views

Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager

F5 BIG-IP 远程命令执行漏洞(CVE-2021-22986) 漏洞影响 F5 BIG-IP 16.x: 1...

10CVSS9.7AI score0.99898EPSS
SaveExploits20
GithubExploit
GithubExploit
added 2021/03/23 2:04 a.m.72 views

Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager

CVE-2021-22986Check CVE-2021-22986 Checker Script in Python3...

10CVSS9.9AI score0.99898EPSS
SaveExploits20
GithubExploit
GithubExploit
added 2021/03/19 6:50 p.m.208 views

Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager

Usage python3 f5rce.py -u Target URL -f Batch detectio...

10CVSS7.6AI score0.99898EPSS
SaveExploits20
GithubExploit
GithubExploit
added 2021/03/17 5:02 a.m.132 views

Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager

CVE-2021-22986-Poc This is a Poc for BIGIP iControl unauth RCE...

10CVSS9.9AI score0.99898EPSS
SaveExploits20
CNVD
CNVD
added 2021/03/03 12:00 a.m.12 views

Dell SRS Policy Manager XML External Entity Injection Vulnerability

Dell SRS Policy Manager is an application from Dell USA. It provides Dell policy management features. A security vulnerability exists in SRS Policy Manager 6.X. The vulnerability stems from a misconfigured XML parser that fails to perform sufficient validation when processing user-supplied DTD...

7.2CVSS6.7AI score0.01402EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/01 9:15 p.m.7 views

CVE-2021-21517

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

7.2CVSS5.8AI score0.01402EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/01 9:15 p.m.26 views

CVE-2021-21517

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

7.2CVSS0.01402EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/01 9:15 p.m.20 views

Xxe

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

6.4CVSS7.1AI score0.01402EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/01 8:25 p.m.39 views

CVE-2021-21517

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

7.2CVSS7.3AI score0.01402EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/01 8:25 p.m.52 views

CVE-2021-21517

CVE-2021-21517 affects Dell SRS Policy Manager 6.X, where an XML External Entity (XXE) vulnerability arises from a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. This allows a remote, unauthenticated attacker to read system files as a non-root user ...

7.2CVSS7AI score0.01402EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/03/01 12:00 a.m.8 views

Dell SRS Policy Manager 代码问题漏洞

Dell SRS Policy Manager is an application from Dell USA. It provides Dell policy management features. A security vulnerability exists in SRS Policy Manager 6.X. The vulnerability stems from a misconfigured XML parser that fails to perform sufficient validation when processing user-supplied DTD...

7.2CVSS5.7AI score0.01402EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/25 12:00 a.m.5 views

CVE-2021-21517

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

7.2CVSS7.1AI score0.01402EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/02/24 12:00 a.m.13 views

Aruba ClearPass Policy Manager Cross-Site Scripting Vulnerability (CNVD-2021-13473)

Aruba ClearPass Policy Manager is a network access control NAC solution. A stored cross-site scripting vulnerability in the ClearPass web administration interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute...

6.1CVSS6.4AI score0.00873EPSS
SaveExploits0References1
Rows per page
Query Builder