CVE-2021-26682

A remote reflected cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...

CVE-2021-26683

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2020-7120

A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users to cause a buffer overflow condition. A successful exploit could allow a...

CVE-2020-7120

CVE-2020-7120 is a local authenticated buffer overflow in Aruba ClearPass Policy Manager and ClearPass OnGuard, affecting versions before 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability could allow a local authenticated attacker to execute arbitrary code within the context of the running bina...

CVE-2021-26677

CVE-2021-26677 describes a local authenticated privilege-escalation vulnerability in Aruba ClearPass Policy Manager (affected versions: prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1) where a Windows-based, locally authenticated user could elevate privileges to SYSTEM and potentially execute arbitrary cod...

CVE-2021-26677

A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful...

CVE-2021-26679

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26679

CVE-2021-26679 describes a remote authenticated command injection vulnerability in Aruba ClearPass Policy Manager. The issue exists in the web-based management interface for versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, allowing remote authenticated users to execute arbitrary commands on th...

CVE-2021-26680

Aruba ClearPass Policy Manager is affected by a remote authenticated command-injection vulnerability in the web-based management interface for versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. A successful exploit could allow an authenticated attacker to execute arbitrary commands as root on th...

CVE-2021-26680

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26678

Aruba ClearPass Policy Manager Web UI stores an unauthenticated stored XSS in versions before 6.9.5, 6.8.8-HF1, 6.7.14-HF1. An unauthenticated remote attacker could trigger script execution in the context of the administrative interface. Exploitation details are not provided; impact is limited to...

CVE-2021-26678

A remote unauthenticated stored cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a...

CVE-2021-26684

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26684

CVE-2021-26684 affects Aruba ClearPass Policy Manager. A remote authenticated command injection vulnerability exists in the ClearPass web-based management interface, allowing an authenticated user to run arbitrary commands on the underlying host with root privileges, potentially leading to full s...

CVE-2021-26682

A remote reflected cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...

CVE-2021-26682

Aruba ClearPass Policy Manager is affected by a remote reflected XSS in the guest portal interface. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability could allow an attacker to execute script code in a victim’s browser within the context of the guest portal interf...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

Sql injection

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...