Not rated
CVE-2020-7110 ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised…
Description
ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass that could be executed resulting in a privilege escalation attack. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ClearPass Policy Manager | Versions not published |
References
- www.arubanetworks.com www.arubanetworks.com
Timeline
- Published
- Last modified
Other CVEs of ClearPass Policy Manager
The 7 CVEs of ClearPass Policy Manager →
CVE-2020-7116
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
Not rated
CVE-2020-7117
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
Not rated
CVE-2020-7115
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass
Not rated
CVE-2020-7113
A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to…
Not rated