CVE-2021-26679

CVE-2021-26679 describes a remote authenticated command injection vulnerability in Aruba ClearPass Policy Manager. The issue exists in the web-based management interface for versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, allowing remote authenticated users to execute arbitrary commands on th...

CVE-2021-26680

Aruba ClearPass Policy Manager is affected by a remote authenticated command-injection vulnerability in the web-based management interface for versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. A successful exploit could allow an authenticated attacker to execute arbitrary commands as root on th...

CVE-2021-26678

Aruba ClearPass Policy Manager Web UI stores an unauthenticated stored XSS in versions before 6.9.5, 6.8.8-HF1, 6.7.14-HF1. An unauthenticated remote attacker could trigger script execution in the context of the administrative interface. Exploitation details are not provided; impact is limited to...

CVE-2021-26684

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26684

CVE-2021-26684 affects Aruba ClearPass Policy Manager. A remote authenticated command injection vulnerability exists in the ClearPass web-based management interface, allowing an authenticated user to run arbitrary commands on the underlying host with root privileges, potentially leading to full s...

CVE-2021-26682

Aruba ClearPass Policy Manager is affected by a remote reflected XSS in the guest portal interface. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability could allow an attacker to execute script code in a victim’s browser within the context of the guest portal interf...

CVE-2021-26681

CVE-2021-26681 affects Aruba ClearPass Policy Manager prior to version 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability is a remote authenticated command injection in the ClearPass CLI that could allow an attacker with valid credentials to execute arbitrary commands on the underlying host as r...

CVE-2021-26681

A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo...

CVE-2021-26685

Aruba ClearPass Policy Manager contains a SQL injection vulnerability in the web-based management interface API that is exploitable by an authenticated remote attacker. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. Successful exploitation could allow an attacker to obtain and m...

PT-2021-17090

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager version 6.8.8-HF1 Aruba ClearPass Policy Manager version 6.7.14-HF1 Description A remote authenticated SQL Injection issue was discovered in the web-based...

PT-2021-17087

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager version 6.8.8-HF1 Aruba ClearPass Policy Manager version 6.7.14-HF1 Description A remote reflected cross-site scripting XSS vulnerability was discovered in t...

PT-2021-17088

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager version 6.8.8-HF1 Aruba ClearPass Policy Manager version 6.7.14-HF1 Description A remote authenticated command injection vulnerability was discovered in the...

CVE-2021-26677: Undefined Security Weakness

A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful...

PT-2021-17089

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager version 6.8.8-HF1 Aruba ClearPass Policy Manager version 6.7.14-HF1 Description A remote authenticated command injection vulnerability was discovered in the...

CVE-2021-26685: Improper Neutralization of Special Elements used in an SQL Command

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26682: Improper Neutralization of Input During Web Page Generation

A remote reflected cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...

CVE-2021-26679: Improper Neutralization of Special Elements used in an OS Command

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26683: Improper Neutralization of Special Elements used in an OS Command

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26684: Improper Neutralization of Special Elements used in an OS Command

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

Aruba ClearPass Policy Manager Prior 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...