4.8
Medium
CVE-2024-51773 A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an…
Description
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting (XSS) attack. Successful exploitation could enable a threat actor to perform any actions the user is authorized to do, including accessing the user's data and altering information within the user's permissions. This could lead to data modification, deletion, or theft, including unauthorized access to files, file deletion, or the theft of session cookies, which an attacker could use to hijack a user's session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking ClearPass Policy Manager 6.12 | 6.12.0 → 6.12.2 | No fix stated |
| HPE Aruba Networking ClearPass Policy Manager 6.11 | 6.11.0 → 6.11.9 | No fix stated |
Other CVEs of HPE Aruba Networking ClearPass Policy Manager
The 10 CVEs of HPE Aruba Networking ClearPass Policy Manager →
CVE-2026-23599
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software…
7.8
High
CVE-2025-37122
A vulnerability in the web-based management interface of network access control services could allow an…
6.1
Medium
CVE-2025-25039
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows…
4.7
Medium
CVE-2025-23060
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive…
6.6
Medium