CVE-2021-29146

A remote cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29145

A remote server side request forgery SSRF remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29147

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29142

A remote cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29142

Aruba ClearPass Policy Manager is affected by CVE-2021-29142, a remote XSS vulnerability in the web interface for versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1. The issue arises from insufficient validation of client-supplied data in the WEB application, enabling a remote attacker to execute cli...

CVE-2021-29147

Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1 contain a remote arbitrary command execution vulnerability. The CVE-2021-29147 issue has been confirmed across multiple sources (NVD, Red Hat, CNVD/CNNVD, CVE records) and Aruba has released patches addressing the vulne...

CVE-2021-29147

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29144

A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29144

Aruba ClearPass Policy Manager Vulnerability (CVE-2021-29144) affects version(s) prior to 6.9.5, 6.8.9, and 6.7.14‑HF1. The NVD and Red Hat entries describe a remote information disclosure vulnerability in the web interface that could allow attackers to obtain sensitive data. Aruba has released p...

CVE-2021-29145

Aruba ClearPass Policy Manager is affected by CVE-2021-29145, an SSRF-based remote code execution vulnerability in the product’s server-side functionality. Versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1 are impacted. Aruba has released patches addressing this vulnerability. The risk context from ...

CVE-2021-29146

The CVE-2021-29146 entry describes a remote cross-site scripting (XSS) vulnerability in Aruba ClearPass Policy Manager, affecting versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1. The issue stems from insufficient validation of client-side data by the WEB application, enabling injection of maliciou...

PT-2021-18106

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager versions prior to 6.8.9 Aruba ClearPass Policy Manager versions prior to 6.7.14-HF1 Description: A remote cross-site scripting XSS vulnerability was...

PT-2021-18109

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager versions prior to 6.8.9 Aruba ClearPass Policy Manager versions prior to 6.7.14-HF1 Description: A remote server side request forgery SSRF remote code...

CVE-2021-29145: Server-Side Request Forgery (SSRF)

A remote server side request forgery SSRF remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29140: Improper Restriction of XML External Entity Reference

A remote XML external entity XXE vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

Aruba ClearPass Policy Manager 跨站脚本漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A cross-site scripting vulnerability exists in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1, which stems from a lack of proper...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is an application that provides a wireless network security access management system. An information disclosure vulnerability exists in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.9, 6.7.14-HF1, which can be exploited by a remote attacker to submit a...

PT-2021-18111

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager versions prior to 6.8.9 Aruba ClearPass Policy Manager versions prior to 6.7.14-HF1 Description: A remote arbitrary command execution issue was discovered...

PT-2021-18110

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager versions prior to 6.8.9 Aruba ClearPass Policy Manager versions prior to 6.7.14-HF1 Description: A remote cross-site scripting XSS vulnerability was...