CVE-2015-1389

CVE-2015-1389 affects Aruba ClearPass Policy Manager (CPPM) prior to 6.4.5, where an attacker can inject arbitrary script via the username parameter to tips/tipsLoginSubmit.action (stored XSS). Affected component is CPPM’s web login flow; root cause is inadequate input handling in the login proce...

CVE-2014-6628

CVE-2014-6628 affects Aruba Networks ClearPass Policy Manager (CPPM) prior to 6.5.0. The vulnerability enables remote administrators to execute arbitrary code via unspecified vectors. Connected documents corroborate the CPPM context and the arbitrary-code impact but do not provide concrete exploi...

CVE-2015-1392

Aruba Networks CPPM (ClearPass Policy Manager) is affected by CVE-2015-1392. The connected sources describe multiple SQL injection vulnerabilities in CPPM prior to version 6.4.5 that allow remote administrators to execute arbitrary SQL commands via unspecified vectors. The root cause is SQL injec...

CVE-2015-4132

Aruba Networks ClearPass Policy Manager (CPPM) is affected by multiple XSS vulnerabilities in versions before 6.4.5. The issue allows remote administrators to inject arbitrary web script/HTML via unspecified vectors. The CNVD entry additionally notes a directory traversal security vulnerability i...

CVE-2015-1550

The vulnerability affects Aruba Networks ClearPass Policy Manager (CPPM). CPPM versions before 6.4.5 are vulnerable to a directory traversal flaw that allows remote administrators to execute arbitrary files via unspecified vectors. Root cause is a directory traversal vulnerability in CPPM, leadin...

CVE-2015-1551

Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors...

CVE-2015-1392

Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1389

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...

CVE-2015-1551

CVE-2015-1551 affects Aruba Networks ClearPass Policy Manager (CPPM). It is a directory traversal vulnerability that allows remote administrators to read arbitrary files via unspecified vectors. The NVD entry specifies CPPM versions before 6.4.4. Related connected documents corroborate the vulner...

CVE-2014-6628

Aruba Networks ClearPass Policy Manager CPPM before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors...

CVE-2015-1550

Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors...

Aruba ClearPass Policy Manager 6.4 Cross Site Scripting

=============================================================================== title: ClearPass Policy Manager Stored XSS case id: CM-2014-01 product: Aruba ClearPass Policy Manager vulnerability type: Stored cross-site script severity: Medium found: 2014-11-24 by: Cristiano Maruti @cmaruti...

F5 BigIP Access Policy Manager Session Exhaustion Denial of Service

This module exploits a resource exhaustion denial of service in F5 BigIP devices. An unauthenticated attacker can establish multiple connections with BigIP Access Policy Manager APM and exhaust all available sessions defined in customer license. In the first step of the BigIP APM negotiation the...

CVE-2014-5286

The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers...

Authentication flaw

The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers...

CVE-2014-5286

The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers...

CVE-2014-5286

The CVE-2014-5286 advisory applies to TIBCO ActiveMatrix components: Policy Agent 3.x before 3.1.2, Policy Manager 3.x before 3.1.2, and Management Agent for WCF/WebSphere before 1.2.1. The issue is a privilege-escalation vulnerability in the Authentication Module that could allow remote attacker...

Sql injection

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager CPPM 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8367

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager CPPM 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8367

Aruba Networks ClearPass Policy Manager (CPPM) is affected by a SQL injection vulnerability (CVE-2014-8367) in versions 6.2.x, 6.3.x prior to 6.3.6, and 6.4.x prior to 6.4.2. The issue permits remote attackers to execute arbitrary SQL commands via unspecified vectors. The available sources (NVD/N...