CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-26301
https://notcve.org/view.php?id=CVE-2024-26301
27 Feb 2024 — A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager. Una vulnerabilidad en la interfaz de administración basada en web de ClearPass Policy Manager podría permitir que un atacante remoto autenticado con privil... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-26298
https://notcve.org/view.php?id=CVE-2024-26298
27 Feb 2024 — Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Las vulnerabilidades en la interfaz de administración basada en web de ClearPass Policy Manager permiten a usuarios remotos autenticados ejecutar comandos arbitrarios en el host subyacente. Un ... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-26297
https://notcve.org/view.php?id=CVE-2024-26297
27 Feb 2024 — Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Las vulnerabilidades en la interfaz de administración basada en web de ClearPass Policy Manager permiten a usuarios remotos autenticados ejecutar comandos arbitrarios en el host subyacente. Un ... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-26296
https://notcve.org/view.php?id=CVE-2024-26296
27 Feb 2024 — Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Las vulnerabilidades en la interfaz de administración basada en web de ClearPass Policy Manager permiten a usuarios remotos autenticados ejecutar comandos arbitrarios en el host subyacente. Un ... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-26295
https://notcve.org/view.php?id=CVE-2024-26295
27 Feb 2024 — Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Las vulnerabilidades en la interfaz de administración basada en web de ClearPass Policy Manager permiten a usuarios remotos autenticados ejecutar comandos arbitrarios en el host subyacente. Un ... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-26294
https://notcve.org/view.php?id=CVE-2024-26294
27 Feb 2024 — Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Las vulnerabilidades en la interfaz de administración basada en web de ClearPass Policy Manager permiten a usuarios remotos autenticados ejecutar comandos arbitrarios en el host subyacente. Un ... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0CVE-2023-43510 – Authenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System Compromise
https://notcve.org/view.php?id=CVE-2023-43510
24 Oct 2023 — A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a non-privileged user on the underlying operating system leading to partial system compromise. Una vulnerabilidad en la interfaz de administración basada en web de ClearPass Policy Manager permite a usuarios remotos autenticados ejecutar comandos arbitrarios en el host s... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 5.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-43509 – Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications
https://notcve.org/view.php?id=CVE-2023-43509
24 Oct 2023 — A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading malicious software. Una vulnerabilidad en la interfaz de administración basada en web de ClearPass Policy Manager podría permitir que un atacante remoto no autenticado envíe notificaciones a ordenadores que ejecutan ClearPass OnG... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-43508 – Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface
https://notcve.org/view.php?id=CVE-2023-43508
24 Oct 2023 — Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of these vulnerabilities allow an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform. Las vulnerabilidades en la interfaz de administración basada en web de ClearPas... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt • CWE-863: Incorrect Authorization •
CVSS: 9.0EPSS: 0%CPEs: 9EXPL: 0CVE-2023-43507 – Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
https://notcve.org/view.php?id=CVE-2023-43507
24 Oct 2023 — A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. Una vulnerabilidad en la interfaz de administración basada en web de ClearPass Policy Manager podría permi... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •