CVE-2021-26680

Aruba ClearPass Policy Manager is affected by a remote authenticated command-injection vulnerability in the web-based management interface for versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. A successful exploit could allow an authenticated attacker to execute arbitrary commands as root on th...

CVE-2021-26680

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26678

Aruba ClearPass Policy Manager Web UI stores an unauthenticated stored XSS in versions before 6.9.5, 6.8.8-HF1, 6.7.14-HF1. An unauthenticated remote attacker could trigger script execution in the context of the administrative interface. Exploitation details are not provided; impact is limited to...

CVE-2021-26678

A remote unauthenticated stored cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a...

CVE-2021-26684

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26684

CVE-2021-26684 affects Aruba ClearPass Policy Manager. A remote authenticated command injection vulnerability exists in the ClearPass web-based management interface, allowing an authenticated user to run arbitrary commands on the underlying host with root privileges, potentially leading to full s...

CVE-2021-26682

A remote reflected cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...

CVE-2021-26682

Aruba ClearPass Policy Manager is affected by a remote reflected XSS in the guest portal interface. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability could allow an attacker to execute script code in a victim’s browser within the context of the guest portal interf...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

Sql injection

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26681

A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo...

CVE-2021-26681

CVE-2021-26681 affects Aruba ClearPass Policy Manager prior to version 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability is a remote authenticated command injection in the ClearPass CLI that could allow an attacker with valid credentials to execute arbitrary commands on the underlying host as r...

CVE-2021-26683

The CVE-2021-26683 entry describes a remote authenticated command injection in Aruba ClearPass Policy Manager, affecting versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability exists in the web-based management interface and allows remote authenticated users to execute arbitrary co...

CVE-2021-26683

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26686

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26686

CVE-2021-26686 : Aruba ClearPass Policy Manager has a remote authenticated SQL injection vulnerability in the web-based management interface API. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. An authenticated attacker could exploit this to obtain and modify sensitive informatio...

CVE-2021-26685

Aruba ClearPass Policy Manager contains a SQL injection vulnerability in the web-based management interface API that is exploitable by an authenticated remote attacker. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. Successful exploitation could allow an attacker to obtain and m...

CVE-2021-26685

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...