NotCVE - vendor:"Arubanetworks" product:"Clearpass" version:" >= 6.7.0

15 results (0.026 seconds)

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-29141

https://notcve.org/view.php?id=CVE-2021-29141

29 Apr 2021 — A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de divulgación remota de información confidencial en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulner... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt •

CVSS: 4.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2021-29139

https://notcve.org/view.php?id=CVE-2021-29139

29 Apr 2021 — A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-29138

https://notcve.org/view.php?id=CVE-2021-29138

29 Apr 2021 — A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de divulgación de información privilegiada remota en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulne... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt •

CVSS: 8.2EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-29140

https://notcve.org/view.php?id=CVE-2021-29140

29 Apr 2021 — A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de XML external entity (XXE) remota en Aruba ClearPass Policy Manager: versiones: Anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 4.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2021-29142

https://notcve.org/view.php?id=CVE-2021-29142

CVSS: 9.0EPSS: 4%CPEs: 4EXPL: 0

CVE-2021-29147

https://notcve.org/view.php?id=CVE-2021-29147

29 Apr 2021 — A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de ejecución de comandos remota arbitrarios en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de se... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-29144

https://notcve.org/view.php?id=CVE-2021-29144

29 Apr 2021 — A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de divulgación de información confidencial remota en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulner... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt •

CVSS: 9.8EPSS: 2%CPEs: 3EXPL: 0

CVE-2021-29145

https://notcve.org/view.php?id=CVE-2021-29145

29 Apr 2021 — A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Se detectó una vulnerabilidad de Ejecución de Código Remota de tipo server side request forgery (SSRF) en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1. Aruba ha publicado parches para Aruba Clea... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt • CWE-918: Server-Side Request Forgery (SSRF) •

CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2021-29146

https://notcve.org/view.php?id=CVE-2021-29146

CVSS: 4.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-7110

https://notcve.org/view.php?id=CVE-2020-7110

16 Apr 2020 — ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass that could be executed resulting in a privilege escalation attack. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher. ClearPass es vulnerable a un ataque de tipo Cross Site Scripting Almacenado al permitir a un administrador malicioso, o una cuenta de administrador comprometida, guardar scripts maliciosos dentro de ClearPass que p... • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

1 2