CVE-2022-23685

Aruba ClearPass Policy Manager Web UI CSRF exposure (CVE-2022-23685). Affects ClearPass Policy Manager versions 6.10.x <= 6.10.6 and 6.9.x

CVE-2022-23685

A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery CSRF protection. This could allow a remote unauthenticated attacker to execute arbitrary input against these endpoints if the attacker can...

CVE-2022-23685

A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery CSRF protection. This could allow a remote unauthenticated attacker to execute arbitrary input against these endpoints if the attacker can...

CVE-2022-23692

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23692

CVE-2022-23692 affects Aruba ClearPass Policy Manager. The web-based management interface contains SQL injection vulnerabilities exploitable by an authenticated remote attacker, potentially allowing theft or modification of database information and possible complete compromise of the ClearPass Po...

CVE-2022-23692

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23693

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23693

CVE-2022-23693 affects Aruba ClearPass Policy Manager. The web-based management interface contains SQL injection vulnerabilities that authenticated remote attackers could exploit against 6.10.x (6.10.6 and below) and 6.9.x (6.9.11 and below). Multiple sources (NVD/Red Hat/PRION/CNNVD/NCSc) confir...

CVE-2022-23693

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23695

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23695

CVE-2022-23695 describes SQL injection vulnerabilities in the web-based management interface of Aruba ClearPass Policy Manager. An authenticated remote attacker could exploit these flaws to obtain and modify sensitive data in the underlying database, potentially leading to complete compromise of ...

CVE-2022-23695

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23694

Aruba ClearPass Policy Manager v6.10.x (up to 6.10.6) and v6.9.x (up to 6.9.11) are affected by CVE-2022-23694 via the web-based management interface. The issue allows authenticated remote SQL injection to obtain and modify sensitive data in the underlying database, potentially leading to complet...

CVE-2022-23694

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23694

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23696

The vulnerability CVE-2022-23696 affects the web-based management interface of Aruba ClearPass Policy Manager . An authenticated remote attacker could exploit SQL injection to obtain and modify data in the underlying database, potentially leading to complete compromise of the ClearPass Policy Man...

CVE-2022-23696

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-37877

Aruba ClearPass Policy Manager (CPPM) on macOS is affected by a local privilege escalation in the ClearPass OnGuard macOS agent. The issue could allow a malicious user on a macOS instance to execute arbitrary code with root privileges, effectively gaining full control of the host. Affected versio...

CVE-2022-37877

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager versions...

CVE-2022-37877

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager versions...