4.8
Moyenne
CVE-2024-51773 A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an…
Description
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting (XSS) attack. Successful exploitation could enable a threat actor to perform any actions the user is authorized to do, including accessing the user's data and altering information within the user's permissions. This could lead to data modification, deletion, or theft, including unauthorized access to files, file deletion, or the theft of session cookies, which an attacker could use to hijack a user's session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking ClearPass Policy Manager 6.12 | 6.12.0 → 6.12.2 | Pas de correctif indiqué |
| HPE Aruba Networking ClearPass Policy Manager 6.11 | 6.11.0 → 6.11.9 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking ClearPass Policy Manager
Les 10 CVE de HPE Aruba Networking ClearPass Policy Manager →
CVE-2026-23599
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software…
7.8
Élevée
CVE-2025-37122
A vulnerability in the web-based management interface of network access control services could allow an…
6.1
Moyenne
CVE-2025-25039
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows…
4.7
Moyenne
CVE-2025-23060
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive…
6.6
Moyenne