CVE-2015-4132 — Cross-site Scripting in Clearpass Policy Manager

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
3.5LOWNVD
EPSS
0.3%
top 48.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Arubanetworks Clearpass Policy Manager
Timeline
PublishedMay 28
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-r5x6-prwq-4f8w: Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6↗2022-05-17
▶
CVEList
CVE-2015-4132: Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6↗2015-05-28
▶

💥Exploits & PoCs

1
Exploit-DB
Boxoft WAV to MP3 Converter - 'convert' Local Buffer Overflow↗2015-08-31
▶
CVE-2015-4132 — Cross-site Scripting | cvebase