CVE-2016-2034

CVE-2016-2034 affects Aruba Networks ClearPass Policy Manager, with an SQL injection vulnerability reported for version 6.5.x up to 6.5.6 and 6.6.0. The connected documents confirm the vulnerability exists in ClearPass Policy Manager but do not provide concrete exploit details, affected configura...

PT-2017-7989

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.5.x through 6.5.6 Aruba ClearPass Policy Manager version 6.6.0 Description A SQL injection issue has been identified. Recommendations For versions 6.5.x through 6.5.6, update to a version outside of th...

CVE-2016-2034: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

HPE Aruba ClearPass Policy Manager Security Bypass Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A security bypass vulnerability exists in versions of HPE Aruba ClearPass Policy Manager prior to 6.6.5. An attacker could exploit this vulnerability to bypass security restrictions...

HPE Aruba ClearPass Policy Manager Arbitrary Command Execution Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. An arbitrary command execution vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. An attacker could exploit this vulnerability to execute arbitrary command...

HPE Aruba ClearPass Policy Manager Cross-Site Scripting Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A cross-site scripting vulnerability exists in versions of HPE Aruba ClearPass Policy Manager prior to 6.6.5. A remote attacker could exploit this vulnerability to inject arbitrary web...

HPE Aruba ClearPass Policy Manager Remote Code Execution Vulnerability (CNVD-2017-08804)

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. A remote attacker could exploit the vulnerability to execute code...

HPE Aruba ClearPass Policy Manager Remote Code Execution Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. A remote attacker could exploit the vulnerability to execute code...

HPE Aruba ClearPass Policy Manager Elevation of Privilege Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. An elevation of privilege vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. An attacker could exploit this vulnerability to gain elevated privileges...

HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Cross-Site Scripting XSS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - All ClearPass 6.6.x version...

HPESBHF03723 rev.1 - HPE Aruba ClearPass Policy Manager, using Apache Struts, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager All versions prior to 6.6.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5638 |...

Aruba Networks - ClearPass Policy Manager suffers from s2-045 remote command execution vulnerability

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The Aruba Networks - ClearPass Policy Manager web package uses Apache Struts xwork as the web application framework. The file upload functio...

PT-2015-3342

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.7 Aruba Networks ClearPass Policy Manager versions 6.5.x prior to 6.5.2 Description The issue is related to insufficient access control in the Aruba Networks ClearPass Policy Manage...

Aruba ClearPass Policy Manager Stored XSS Vulnerability

Exploit for php platform in category web applications =============================================================================== title: ClearPass Policy Manager Stored XSS case id: CM-2014-01 product: Aruba ClearPass Policy Manager vulnerability type: Stored cross-site script severity: Mediu...

Aruba Networks CPPM Remote Code Execution Vulnerability

Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by remote administrators to execute arbitrary code...

Aruba Networks CPPM Cross-Site Scripting Vulnerability (CNVD-2015-03509)

Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by remote administrators to inject arbitrary web script or...

Aruba Networks CPPM Directory Traversal Vulnerability (CNVD-2015-03506)

Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A directory traversal security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by a remote administrator to execute...

Aruba Networks CPPM Directory Traversal Vulnerability (CNVD-2015-03507)

Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A directory traversal security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by a remote administrator to execute...

Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting

Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting =============================================================================== title: ClearPass Policy Manager Stored XSS case id: CM-2014-01 product: Aruba ClearPass Policy Manager vulnerability type: Stored cross-site script...

Aruba Networks CPPM Cross-Site Scripting Vulnerability (CNVD-2015-03502)

Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A directory traversal security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM versions prior to 6.4.5, which can be exploited by remote...