3837 matches found
CVE-2015-1551
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors...
CVE-2015-1550
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors...
CVE-2015-1392
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-1389
Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...
Code injection
Aruba Networks ClearPass Policy Manager CPPM before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors...
Directory traversal
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors...
Sql injection
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors...
Directory traversal
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...
CVE-2014-6628
Aruba Networks ClearPass Policy Manager CPPM before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors...
CVE-2014-6628
CVE-2014-6628 affects Aruba Networks ClearPass Policy Manager (CPPM) prior to 6.5.0. The vulnerability enables remote administrators to execute arbitrary code via unspecified vectors. Connected documents corroborate the CPPM context and the arbitrary-code impact but do not provide concrete exploi...
CVE-2015-1389
CVE-2015-1389 affects Aruba ClearPass Policy Manager (CPPM) prior to 6.4.5, where an attacker can inject arbitrary script via the username parameter to tips/tipsLoginSubmit.action (stored XSS). Affected component is CPPM’s web login flow; root cause is inadequate input handling in the login proce...
CVE-2015-4132
Aruba Networks ClearPass Policy Manager (CPPM) is affected by multiple XSS vulnerabilities in versions before 6.4.5. The issue allows remote administrators to inject arbitrary web script/HTML via unspecified vectors. The CNVD entry additionally notes a directory traversal security vulnerability i...
CVE-2015-4132
Multiple cross-site scripting XSS vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1392
Aruba Networks CPPM (ClearPass Policy Manager) is affected by CVE-2015-1392. The connected sources describe multiple SQL injection vulnerabilities in CPPM prior to version 6.4.5 that allow remote administrators to execute arbitrary SQL commands via unspecified vectors. The root cause is SQL injec...
CVE-2015-1550
The vulnerability affects Aruba Networks ClearPass Policy Manager (CPPM). CPPM versions before 6.4.5 are vulnerable to a directory traversal flaw that allows remote administrators to execute arbitrary files via unspecified vectors. Root cause is a directory traversal vulnerability in CPPM, leadin...
CVE-2015-1389
Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...