HP
HP Aruba Clearpass Policy Manager: vulnerabilidades y CVE
HP Aruba Clearpass Policy Manager tiene 11 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-7059 | Alta (8.8) | 1.1% | — | 6 ago 2018 | Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which… |
| CVE-2018-7058 | Crítica (9.8) | 3.9% | — | 6 ago 2018 | Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability… |
| CVE-2018-5390 | Alta (7.5) | 74% | — | 6 ago 2018 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. |
| CVE-2017-9002 | Media (6.1) | 0.92% | — | 6 ago 2018 | All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can trick a logged-in ClearPass administrative user into clicking… |
| CVE-2017-9001 | Alta (8.1) | 7.3% | — | 6 ago 2018 | Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command… |
| CVE-2017-5829 | Alta (7.8) | 0.59% | — | 15 feb 2018 | An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
| CVE-2017-5828 | Alta (8.1) | 1.9% | — | 15 feb 2018 | An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
| CVE-2017-5827 | Media (5.4) | 0.71% | — | 15 feb 2018 | A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
| CVE-2017-5826 | Alta (8.8) | 3.3% | — | 15 feb 2018 | An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
| CVE-2017-5825 | Alta (8.8) | 1.8% | — | 15 feb 2018 | A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
| CVE-2017-5824 | Crítica (9.8) | 19% | — | 15 feb 2018 | An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |