Hewlett Packard Enterprise Aruba Clearpass Policy Manager vulnerabilities

127 known vulnerabilities affecting hewlett_packard_enterprise/aruba_clearpass_policy_manager.

Total CVEs
127
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL16HIGH69MEDIUM42

Vulnerabilities

Page 5 of 7
CVE-2021-40987HIGHCVSS 7.2vClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF12021-10-15
CVE-2021-40987 [HIGH] CVE-2021-40987: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manage
cvelistv5
CVE-2021-40995MEDIUMCVSS 6.3vClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF12021-10-15
CVE-2021-40995 [MEDIUM] CVE-2021-40995: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Mana
cvelistv5
CVE-2021-40990MEDIUMCVSS 6.5vClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF12021-10-15
CVE-2021-40990 [MEDIUM] CVE-2021-40990: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6 A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for Clear
cvelistv5
CVE-2021-40994MEDIUMCVSS 6.3vClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF12021-10-15
CVE-2021-40994 [MEDIUM] CVE-2021-40994: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Mana
cvelistv5
CVE-2021-34609HIGHCVSS 8.8vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34609 [HIGH] CVE-2021-34609: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34610HIGHCVSS 7.2vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34610 [HIGH] CVE-2021-34610: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34611HIGHCVSS 7.2vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34611 [HIGH] CVE-2021-34611: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29150HIGHCVSS 7.2vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-29150 [HIGH] CVE-2021-29150: A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34616MEDIUMCVSS 6.3vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34616 [MEDIUM] CVE-2021-34616: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29152MEDIUMCVSS 6.5vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-29152 [MEDIUM] CVE-2021-29152: A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote denial of service (DoS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34614MEDIUMCVSS 6.3vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34614 [MEDIUM] CVE-2021-34614: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34615MEDIUMCVSS 6.3vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34615 [MEDIUM] CVE-2021-34615: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34613MEDIUMCVSS 6.3vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34613 [MEDIUM] CVE-2021-34613: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29151MEDIUMCVSS 4.3vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-29151 [MEDIUM] CVE-2021-29151: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-34612MEDIUMCVSS 6.3vPrior to 6.10.0, 6.9.6 and 6.8.92021-07-08
CVE-2021-34612 [MEDIUM] CVE-2021-34612: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29145CRITICALCVSS 9.8vPrior to 6.9.5, 6.8.9, 6.7.14-HF12021-04-29
CVE-2021-29145 [CRITICAL] CVE-2021-29145: A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6 A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29147HIGHCVSS 8.8vPrior to 6.9.5, 6.8.9, 6.7.14-HF12021-04-29
CVE-2021-29147 [HIGH] CVE-2021-29147: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6 A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29140HIGHCVSS 8.2vPrior to 6.9.5, 6.8.9, 6.7.14-HF12021-04-29
CVE-2021-29140 [HIGH] CVE-2021-29140: A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6 A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29139MEDIUMCVSS 4.8vPrior to 6.9.5, 6.8.9, 6.7.14-HF12021-04-29
CVE-2021-29139 [MEDIUM] CVE-2021-29139: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6 A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
cvelistv5
CVE-2021-29146MEDIUMCVSS 5.4vPrior to 6.9.5, 6.8.9, 6.7.14-HF12021-04-29
CVE-2021-29146 [MEDIUM] CVE-2021-29146: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6 A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
cvelistv5
← Previous5 / 7Next →