CVE-2021-26686

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attack...

CVE-2021-26686

CVE-2021-26686 : Aruba ClearPass Policy Manager has a remote authenticated SQL injection vulnerability in the web-based management interface API. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. An authenticated attacker could exploit this to obtain and modify sensitive informatio...