Remote code execution

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

Privilege escalation

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

Command injection

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5825

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

CVE-2017-5824 affects HPE Aruba ClearPass Policy Manager 6.6.x. The vulnerability is an unauthenticated remote code execution flaw that can enable an attacker to execute arbitrary code remotely. CVSS3 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with a base score of 9.8 (CRITICAL), indicating high...

CVE-2017-5828

CVE-2017-5828 affects HPE Aruba ClearPass Policy Manager, version 6.6.x. Multiple connected records describe an arbitrary command execution vulnerability in this product family. The CNVD entry further states the issue exists in versions prior to 6.6.5, implying a fix in 6.6.5 or later, but the do...

CVE-2017-5825

CVE-2017-5825 affects HPE Aruba ClearPass Policy Manager 6.6.x. The connected sources describe a privilege-escalation vulnerability in this product, with CVSS v3 base score 8.8 (HIGH), network attack vector, low required privileges, and no user interaction. CNVD-2017-08803 specifies the issue exi...

CVE-2017-5829

CVE-2017-5829 concerns an access restriction bypass in HPE Aruba ClearPass Policy Manager, affecting the 6.6.x line. Multiple trusted sources (NVD and CVE listings) describe a vulnerability that could allow bypassing security controls locally on affected appliances. The CVSS v3.0 score is 7.8 (HI...

CVE-2017-5827

A verified CVE-2017-5827 entry describes a reflected cross-site scripting (XSS) vulnerability in HPE Aruba ClearPass Policy Manager . Affected software is listed as 6.6.x ; one connected source notes that versions prior to 6.6.5 are affected. The vulnerability stems from an issue in the web inter...

CVE-2017-5827

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5826

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5828

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5826

CVE-2017-5826 affects HPE Aruba ClearPass Policy Manager 6.6.x. An authenticated remote code execution vulnerability is reported. CNVD notes the vulnerability exists in versions prior to 6.6.5, with remediation to upgrade to 6.6.5 or later. Exploitation details are not provided in the supplied do...

PT-2018-8285

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description A remote code execution issue was discovered, allowing authenticated attackers to execute arbitrary code. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the...

CVE-2017-5826: Undefined Security Weakness

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824: Undefined Security Weakness

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829: Undefined Security Weakness

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

PT-2018-8287

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description An arbitrary command execution issue was discovered in the software. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the moment, there is no information abou...