CVE-2017-5825

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5827

A verified CVE-2017-5827 entry describes a reflected cross-site scripting (XSS) vulnerability in HPE Aruba ClearPass Policy Manager . Affected software is listed as 6.6.x ; one connected source notes that versions prior to 6.6.5 are affected. The vulnerability stems from an issue in the web inter...

CVE-2017-5827

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

CVE-2017-5824 affects HPE Aruba ClearPass Policy Manager 6.6.x. The vulnerability is an unauthenticated remote code execution flaw that can enable an attacker to execute arbitrary code remotely. CVSS3 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with a base score of 9.8 (CRITICAL), indicating high...

CVE-2017-5826

CVE-2017-5826 affects HPE Aruba ClearPass Policy Manager 6.6.x. An authenticated remote code execution vulnerability is reported. CNVD notes the vulnerability exists in versions prior to 6.6.5, with remediation to upgrade to 6.6.5 or later. Exploitation details are not provided in the supplied do...

CVE-2017-5829

CVE-2017-5829 concerns an access restriction bypass in HPE Aruba ClearPass Policy Manager, affecting the 6.6.x line. Multiple trusted sources (NVD and CVE listings) describe a vulnerability that could allow bypassing security controls locally on affected appliances. The CVSS v3.0 score is 7.8 (HI...

CVE-2017-5829

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5826

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5825

CVE-2017-5825 affects HPE Aruba ClearPass Policy Manager 6.6.x. The connected sources describe a privilege-escalation vulnerability in this product, with CVSS v3 base score 8.8 (HIGH), network attack vector, low required privileges, and no user interaction. CNVD-2017-08803 specifies the issue exi...

CVE-2017-5827: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829: Undefined Security Weakness

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5828: Improper Restriction of XML External Entity Reference

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824: Undefined Security Weakness

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5825: Undefined Security Weakness

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5826: Undefined Security Weakness

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

Aruba ClearPass Policy Manager Elevation of Privilege Vulnerability

Aruba ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. The platform protects next-generation mobile services, improves network access security and simplifies wired, wireless and VPN network operations. A security...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

Design/Logic Flaw

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...