7.2
High
CVE-2024-51771 A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an…
Description
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking ClearPass Policy Manager 6.12 | 6.12.0 → 6.12.2 | No fix stated |
| HPE Aruba Networking ClearPass Policy Manager 6.11 | 6.11.0 → 6.11.9 | No fix stated |
| clearpass_policy_manager 6.12 | 6.12.0 → 6.12.2 | No fix stated |
| clearpass_policy_manager 6.11 | 6.11.0 → 6.11.9 | No fix stated |
Other CVEs of HPE Aruba Networking ClearPass Policy Manager
The 10 CVEs of HPE Aruba Networking ClearPass Policy Manager →
CVE-2026-23599
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software…
7.8
High
CVE-2025-37122
A vulnerability in the web-based management interface of network access control services could allow an…
6.1
Medium
CVE-2025-25039
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows…
4.7
Medium
CVE-2025-23060
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive…
6.6
Medium