Hewlett Packard Enterprise Clearpass Policy Manager vulnerabilities

3 known vulnerabilities affecting hewlett_packard_enterprise/clearpass_policy_manager.

Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2024-41915HIGHCVSS 8.8≥ ClearPass Policy Manager 6.12.1 and below, ≤ <=6.12.1≥ ClearPass Policy Manager 6.11.8 and below, ≤ <=6.11.82024-07-30
CVE-2024-41915 [HIGH] CWE-89 CVE-2024-41915: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an aut A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete
cvelistv5nvd
CVE-2024-41916MEDIUMCVSS 4.9≥ ClearPass Policy Manager 6.12.1 and below, ≤ <=6.12.1≥ ClearPass Policy Manager 6.11.8 and below, ≤ <=6.11.82024-07-30
CVE-2024-41916 [MEDIUM] CVE-2024-41916: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative p A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
cvelistv5nvd
CVE-2024-5486MEDIUMCVSS 4.9≥ ClearPass Policy Manager 6.12.1 and below, ≤ <=6.12.1≥ ClearPass Policy Manager 6.11.8 and below, ≤ <=6.11.82024-07-30
CVE-2024-5486 [MEDIUM] CVE-2024-5486: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative p A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager
cvelistv5nvd