Authentication flaw

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Cross site scripting

A remote reflected cross site scripting xss vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Command injection

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Command injection

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Command injection

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23662

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23670

A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23670

CVE-2022-23670 affects Aruba ClearPass Policy Manager prior to updated releases (versions ≤6.10.4, ≤6.9.9, ≤6.8.9-HF2, and ≤6.7.x). The vulnerability is a remote authenticated information disclosure in the web-facing management interface. Aruba has released updates to address this issue. The prov...

CVE-2022-23667

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23667

CVE-2022-23667 affects Aruba ClearPass Policy Manager (CPPM) versions 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, and 6.7.x and below. It is described as an authenticated remote command injection vulnerability. The available connected sources indicate Aruba has released updates to add...

CVE-2022-23668

A remote authenticated server-side request forgery ssrf vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manage that address this security vulnerability...

CVE-2022-23668

CVE-2022-23668 is a remote authenticated SSRF vulnerability in Aruba ClearPass Policy Manager. Affected versions are 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, and 6.7.x and below. Aruba has released updates to address this vulnerability (per ARUBA-PSA-2022-007). Connected sources (N...

CVE-2022-23666

Summary: CVE-2022-23666 is an authenticated remote command-injection vulnerability in Aruba ClearPass Policy Manager. The issue affects CPPM versions 6.10.4 and earlier, 6.9.9 and earlier, 6.8.9-HF2 and earlier, and 6.7.x and earlier, with exploitation via the web management interface. Aruba has ...

CVE-2022-23666

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23665

CVE-2022-23665 is an authenticated remote command injection vulnerability in Aruba ClearPass Policy Manager. Affected versions include CPPM 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, and 6.7.x and below. The root cause is an injectable command path in the policy manager that allows a...

CVE-2022-23665

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23664

Aruba ClearPass Policy Manager is affected by an authenticated remote command injection vulnerability tracked as CVE-2022-23664. The issue impacts CP PM versions 6.10.4 and earlier, 6.9.9 and earlier, 6.8.9-HF2 and earlier, and 6.7.x and earlier. The connected documents confirm the root cause as ...

CVE-2022-23664

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23661

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2022-23661

CVE-2022-23661 is an authenticated remote command-injection vulnerability in Aruba ClearPass Policy Manager. Affected releases include 6.10.4 and earlier, 6.9.9 and earlier, 6.8.9-HF2 and earlier, and 6.7.x and earlier. The underlying issue is in the command line interface, enabling an authentica...