Cross site scripting

Cross-site scripting XSS vulnerability in F5 BIG-IP Access Policy Manager APM 11.5.x and 11.6.x Admin Web UI...

CVE-2019-6595

Cross-site scripting XSS vulnerability in F5 BIG-IP Access Policy Manager APM 11.5.x and 11.6.x Admin Web UI...

CVE-2019-6595

Cross-site scripting XSS vulnerability in F5 BIG-IP Access Policy Manager APM 11.5.x and 11.6.x Admin Web UI...

Aruba ClearPass Policy Manager Detection

Binary data arubaclearpasspolmandetect.nbin...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2018-1904)

Summary IBM WebSphere Application Server WAS is shipped as a component of Tivoli Security Policy Manager TSPM. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulleti...

CVE-2018-15335

When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failur...

F5 BIG-IP APM and BIG-IP APM Clients svpn elevation of privilege vulnerability

F5 BIG-IP APM and BIG-IP APM Clients are both products of F5 Corporation in the U.S. F5 BIG-IP APM is a suite of access and security solutions. the APM Client is a suite of APM client software. svpn is one of the private VPN components. An elevation of privilege vulnerability exists in F5 BIG-IP...

Aruba ClearPass Policy Manager Command Execution Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...

Aruba ClearPass Policy Manager SQL Injection Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. An SQL injecti...

Unspecified Vulnerability in Aruba ClearPass Policy Manager

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...

Aruba ClearPass Policy Manager Authentication Bypass Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...

CVE-2018-7066

An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators to link other network devices into ClearPass for the purpose of collecting enhanced information about connected endpoints. A defect in the...

CVE-2018-7079

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privileg...

Sql injection

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...

CVE-2018-7067

A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web...

CVE-2018-7067

Aruba ClearPass Policy Manager vulnerability CVE-2018-7067 is an authentication bypass in the administrative API that can lead to complete cluster compromise. A remote attacker who can reach the admin web interface via the API can bypass authentication and take control of the entire ClearPass clu...

CVE-2018-7079

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privileg...

CVE-2018-7065

Aruba ClearPass Policy Manager is affected by an authenticated SQL injection vulnerability (CVE-2018-7065) that could allow an authenticated admin to obtain the 'appadmin' credentials and lead to complete cluster compromise. Affected versions include 6.7.x prior to 6.7.6 and 6.6.10-hotfix; remedi...

CVE-2018-7066

CVE-2018-7066 describes an unauthenticated remote command execution in Aruba ClearPass Policy Manager via the OnConnect feature. A defect in the API used to link other network devices (configuration under CLI Settings for linked devices) could allow a remote attacker to execute arbitrary commands...

CVE-2018-7079

Aruba ClearPass Policy Manager: CVE-2018-7079 describes a guest-authorization failure in ClearPass Guest where certain administrative operations do not enforce privileges, enabling any authenticated administrative user to view, modify, or delete guest users regardless of privilege level. The issu...