Browse CVEs

HIGH 8.8 CVE-2022-23695 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injecti… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-23696 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injecti… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.8 CVE-2022-37877 A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful e… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.5 CVE-2022-37884 A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations wh… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-37878 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-37879 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-37880 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-37881 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-37882 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-37883 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the unde… Clearpass Policy Manager 6.9.12 / 6.10.7+ Fix from $1,9502022-09-20 HIGH 8.8 CVE-2022-23684 A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their p… Aos Cx 10.06.0210 / 10.08.1070+ Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-23682 Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could al… Aos Cx 10.06.0220 / 10.08.1080+ Fix from $1,9502022-09-06 HIGH 7.2 CVE-2022-23683 Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulner… Aos Cx 10.06.0220 / 10.08.1080+ Fix from $1,9502022-09-06 MEDIUM 6.8 CVE-2022-23691 A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authenticat… Aos Cx after 10.10.0002 Fix from $1,6002022-09-06 MEDIUM 5.3 CVE-2022-23690 A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX… Aos Cx 10.06.0200 / 10.08.1060+ Fix from $1,6002022-09-06 HIGH 8.8 CVE-2022-23679 AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in th… Aos Cx 10.06.0210 / 10.08.1070+ Fix from $1,9502022-09-06 HIGH 8.8 CVE-2022-23680 AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in th… Aos Cx 10.06.0210 / 10.08.1070+ Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-23681 Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could al… Aos Cx 10.06.0220 / 10.08.1080+ Fix from $1,9502022-09-06 MEDIUM 5.4 CVE-2022-23674 A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below,… Clearpass Policy Manager 6.8.9+ Fix from $1,6002022-05-17 HIGH 8.8 CVE-2022-23669 A remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2… Clearpass Policy Manager 6.8.9+ Fix from $1,9502022-05-17 HIGH 7.5 CVE-2022-23671 A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and … Clearpass Policy Manager 6.8.9+ Fix from $1,9502022-05-17 HIGH 7.2 CVE-2022-23672 A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below… Clearpass Policy Manager 6.8.9+ Fix from $1,9502022-05-17 HIGH 7.2 CVE-2022-23673 A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below… Clearpass Policy Manager 6.8.9+ Fix from $1,9502022-05-17 MEDIUM 6.5 CVE-2022-23670 A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and … Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $1,6002022-05-16 HIGH 7.2 CVE-2022-23667 A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below… Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $1,9502022-05-16 CRITICAL 10.0 CVE-2022-23657 A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF… Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $2,3002022-05-16 CRITICAL 10.0 CVE-2022-23658 A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF… Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $2,3002022-05-16 CRITICAL 10.0 CVE-2022-23660 A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF… Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $2,3002022-05-16 CRITICAL 9.1 CVE-2022-23661 A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below… Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $2,3002022-05-16 CRITICAL 9.1 CVE-2022-23662 A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below… Clearpass Policy Manager 6.8.9 / 6.9.10+ Fix from $2,3002022-05-16