Browse CVEs

HIGH 10.0 CVE-2014-6626 Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows … Clearpass after 6.3.4 Fix from $1,9502014-11-19 HIGH 9.0 CVE-2014-6625 The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecifi… Clearpass after 6.3.4 Fix from $1,9502014-11-19 MEDIUM 6.8 CVE-2014-6624 The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unsp… Clearpass after 6.3.4 Fix from $1,6002014-11-19 MEDIUM 5.0 CVE-2014-6622 Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine the validity of filenames via unspecified vectors. Clearpass after 6.3.4 Fix from $1,6002014-11-19 MEDIUM 5.0 CVE-2014-6621 Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which a… Clearpass after 6.3.4 Fix from $1,6002014-11-19 HIGH 10.0 CVE-2014-5342 Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a differe… Clearpass after 6.3.4 Fix from $1,9502014-11-19 HIGH 7.5 CVE-2014-7299 Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remo… Arubaos Mitigation only Fix from $1,9502014-10-08 HIGH 9.0 CVE-2014-2593 The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacte… Clearpass Policy Manager Mitigation only Fix from $1,9502014-08-29 MEDIUM 5.0 CVE-2013-2269 The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows … Clearpass Mitigation only Fix from $1,6002013-10-01 MEDIUM 6.1 CVE-2009-3836 ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Ac… Arubaos Mitigation only Fix from $1,6002009-11-02 HIGH 7.8 CVE-2008-7095 The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP com… Aruba Mobility Controller Mitigation only Fix from $1,9502009-08-27 HIGH 10.0 CVE-2008-7023 Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, w… Aruba Mobility Controller Mitigation only Fix from $1,9502009-08-21 HIGH 9.0 CVE-2008-2273 Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated use… Arubaos after 3.3 Fix from $1,9502008-05-16