CVE-2015-4132

Aruba Networks ClearPass Policy Manager (CPPM) is affected by multiple XSS vulnerabilities in versions before 6.4.5. The issue allows remote administrators to inject arbitrary web script/HTML via unspecified vectors. The CNVD entry additionally notes a directory traversal security vulnerability i...

CVE-2014-6628

CVE-2014-6628 affects Aruba Networks ClearPass Policy Manager (CPPM) prior to 6.5.0. The vulnerability enables remote administrators to execute arbitrary code via unspecified vectors. Connected documents corroborate the CPPM context and the arbitrary-code impact but do not provide concrete exploi...

CVE-2014-6628: Undefined Security Weakness

Aruba Networks ClearPass Policy Manager CPPM before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors...

CVE-2015-1550: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors...

CVE-2014-8367

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager CPPM 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8367: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager CPPM 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...