Lucene search
+L

1674 matches found

GithubExploit
GithubExploit
added 2023/04/12 8:46 p.m.362 views

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Tippa My Tongue Tippa My Tongue is an exploit that uses CVE-2...

9.8CVSS9.9AI score0.99958EPSS
SaveExploits68
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:00 a.m.10 views

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

7.5CVSS6.2AI score0.00473EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:00 a.m.18 views

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a perpetrator to disclose protected information and enhance their privileges.

The vulnerability of the web interface of the Aruba Networks ClearPass Policy Manager relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information and enhance their privileges...

9CVSS6.5AI score0.00608EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:00 a.m.12 views

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

7.5CVSS6.2AI score0.00473EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/03/22 6:15 a.m.10 views

CVE-2023-25593

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browse...

6.1CVSS6.6AI score0.00473EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/22 6:15 a.m.19 views

CVE-2023-25596

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

4.9CVSS4.7AI score0.00332EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/22 6:15 a.m.13 views

CVE-2023-25596

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

4.9CVSS5.8AI score0.00332EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/22 6:15 a.m.29 views

CVE-2023-25593

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browse...

7.1CVSS6.5AI score0.00473EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/22 6:15 a.m.11 views

CVE-2023-25594

A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to...

8.8CVSS7.3AI score0.00459EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/22 6:15 a.m.9 views

CVE-2023-25592

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browse...

6.1CVSS6.6AI score0.00473EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/22 6:15 a.m.13 views

CVE-2023-25591

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further...

6.5CVSS6.7AI score0.00608EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/22 6:15 a.m.24 views

CVE-2023-25591

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further...

7.6CVSS7.4AI score0.00608EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/22 6:15 a.m.20 views

CVE-2023-25594

A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to...

8.8CVSS6.8AI score0.00459EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/22 6:15 a.m.12 views

CVE-2023-25589

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise...

9.8CVSS7.5AI score0.00961EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/22 6:15 a.m.31 views

CVE-2023-25589

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise...

9.8CVSS9.5AI score0.00961EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/22 6:15 a.m.24 views

Design/Logic Flaw

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise...

7.5CVSS9.3AI score0.00961EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/03/22 6:15 a.m.31 views

Design/Logic Flaw

A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to complete...

6.5CVSS8.4AI score0.00459EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/03/22 6:15 a.m.27 views

Cross site scripting

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browse...

5.8CVSS6AI score0.00473EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/03/22 6:15 a.m.25 views

Design/Logic Flaw

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further...

4CVSS6.4AI score0.00608EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/03/22 6:15 a.m.20 views

Design/Logic Flaw

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

3.3CVSS5.1AI score0.00332EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder