HPE Aruba Networking ClearPass Policy Manager vulnerabilities
6 known vulnerabilities in HPE Aruba Networking ClearPass Policy Manager from Hewlett Packard Enterprise. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
HPE Aruba Networking ClearPass Policy Manager: Improper Privilege Management
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges
- 8.8 High severity
HPE Aruba Networking ClearPass Policy Manager: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary
- 8.1 High severity
HPE Aruba Networking ClearPass Policy Manager: Cleartext Transmission of Sensitive Information
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unaut
- 8.1 High severity
HPE Aruba Networking ClearPass Policy Manager: Weak Authentication
A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrator
- 8.0 High severity
HPE Aruba Networking ClearPass Policy Manager: Improper Neutralization of Special Elements used in a Command
An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands
- 8.8 High severity
HPE Aruba Networking ClearPass Policy Manager: Improper Neutralization of Special Elements used in a Command
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary c