7.1
High
CVE-2023-25592 Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to…
Description
Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba ClearPass Policy Manager | Versions not published |
Other CVEs of Aruba ClearPass Policy Manager
The 33 CVEs of Aruba ClearPass Policy Manager →
CVE-2024-26302
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker…
4.8
Medium
CVE-2024-26301
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker…
6.5
Medium
CVE-2024-26300
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to…
6.6
Medium
CVE-2024-26299
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
6.6
Medium