aruba_clear_pass_policy_manager vulnerabilities

2 known vulnerabilities in aruba_clear_pass_policy_manager from Hewlett Packard Enterprise. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Aruba ClearPass Policy Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-43507Oct 25, 2023Hewlett Packard EnterpriseEPSS 1.11%

  A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtai

• 7.8 High severity

  Aruba ClearPass Policy Manager: Improper Privilege Management

  CVE-2023-43506Oct 25, 2023Hewlett Packard Enterprise

  A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on