CVE-2022-23696

The vulnerability CVE-2022-23696 affects the web-based management interface of Aruba ClearPass Policy Manager . An authenticated remote attacker could exploit SQL injection to obtain and modify data in the underlying database, potentially leading to complete compromise of the ClearPass Policy Man...

CVE-2022-23696

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-23696

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-37877

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager versions...

CVE-2022-37877

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager versions...

CVE-2022-37877

Aruba ClearPass Policy Manager (CPPM) on macOS is affected by a local privilege escalation in the ClearPass OnGuard macOS agent. The issue could allow a malicious user on a macOS instance to execute arbitrary code with root privileges, effectively gaining full control of the host. Affected versio...

CVE-2022-37880

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37880

Aruba ClearPass Policy Manager: Vulnerability in the web-based management interface allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, enabling complete system compromise. Affected: ClearPass Policy Manager 6.10.x (≤6.10.6) and 6.9.x (≤6.9...

CVE-2022-37880

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37878

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37878

CVE-2022-37878 affects Aruba ClearPass Policy Manager web-based management interface. The issue allows remote authenticated users to execute arbitrary commands on the underlying OS with root privileges, potentially leading to full system compromise. Affected versions are 6.10.x <= 6.10.6 and 6...

CVE-2022-37878

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37879

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37879

CVE-2022-37879 affects Aruba ClearPass Policy Manager web-based management interface. A vulnerability allows remote authenticated users to execute arbitrary commands as root on the underlying OS, potentially leading to full system compromise. Affected versions are 6.10.x up to 6.10.6 and 6.9.x up...

CVE-2022-37879

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37884

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in...

CVE-2022-37884

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in...

CVE-2022-37884

CVE-2022-37884 describes a denial-of-service vulnerability in the ClearPass Policy Manager Guest User Interface . An unauthenticated attacker can send specific operations that render the guest interface unavailable. Affected versions are Aruba ClearPass Policy Manager 6.10.x (≤ 6.10.6) and 6.9.x ...

CVE-2022-37881

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37881

CVE-2022-37881 —Aruba ClearPass Policy Manager web-based management interface contains a vulnerability that could allow a remote authenticated user to execute arbitrary commands as root on the underlying OS, potentially resulting in full system compromise. Affected releases include ClearPass Poli...