Known vulnerabilities in Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-26302 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker… | 4.8 Medium | Feb 27, 2024 |
| CVE-2024-26301 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker… | 6.5 Medium | Feb 27, 2024 |
| CVE-2024-26300 | A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to… | 6.6 Medium | Feb 27, 2024 |
| CVE-2024-26299 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote… | 6.6 Medium | Feb 27, 2024 |
| CVE-2024-26298 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run… | 7.2 High | Feb 27, 2024 |
| CVE-2024-26297 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run… | 7.2 High | Feb 27, 2024 |
| CVE-2024-26296 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run… | 7.2 High | Feb 27, 2024 |
| CVE-2024-26295 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run… | 7.2 High | Feb 27, 2024 |
| CVE-2024-26294 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run… | 7.2 High | Feb 27, 2024 |
| CVE-2023-43510 | A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users… | 4.7 Medium | Oct 24, 2023 |
| CVE-2023-43509 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an… | 5.8 Medium | Oct 24, 2023 |
| CVE-2023-43508 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with… | 6.3 Medium | Oct 24, 2023 |
| CVE-2023-43507 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote… | 7.2 High | Oct 24, 2023 |
| CVE-2023-43506 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate… | 7.8 High | Oct 24, 2023 |
| CVE-2023-25596 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to… | 4.5 Medium | Mar 14, 2023 |
| CVE-2023-25595 | A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance… | 5.5 Medium | Mar 14, 2023 |
| CVE-2023-25594 | A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with… | 6.3 Medium | Mar 14, 2023 |
| CVE-2023-25593 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to… | 7.1 High | Mar 14, 2023 |
| CVE-2023-25592 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to… | 7.1 High | Mar 14, 2023 |
| CVE-2023-25591 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker… | 7.6 High | Mar 14, 2023 |
| CVE-2023-25590 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their… | 7.8 High | Mar 14, 2023 |
| CVE-2023-25589 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated… | 9.8 Critical | Mar 14, 2023 |
| CVE-2022-43540 | A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access… | 5.5 Medium | Jan 3, 2023 |
| CVE-2022-43539 | A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged… | 5.7 Medium | Jan 3, 2023 |
| CVE-2022-43538 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run… | 7.2 High | Jan 3, 2023 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18