Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

• CVE-2024-26302 Medium 4.8 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit 0.4%
• CVE-2024-26301 Medium 6.5 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit 0.5%
• CVE-2024-26300 Medium 6.6 A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of 0.4%
• CVE-2024-26299 Medium 6.6 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administ 0.4%
• CVE-2024-26298 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an at 0.9%
• CVE-2024-26297 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an at 0.9%
• CVE-2024-26296 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an at 0.9%
• CVE-2024-26295 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an at 0.9%
• CVE-2024-26294 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an at 0.9%
• CVE-2023-43510 Medium 4.7 Authenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System Compromise 0.8%
• CVE-2023-43509 Medium 5.8 Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications 0.8%
• CVE-2023-43508 Medium 6.3 Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface 0.5%
• CVE-2023-43507 High 7.2 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface 1.1%
• CVE-2023-43506 High 7.8 Local Privilege Escalation in ClearPass OnGuard Linux Agent 0.2%
• CVE-2023-25596 Medium 4.5 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager 0.3%
• CVE-2023-25595 Medium 5.5 Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent 0.2%
• CVE-2023-25594 Medium 6.3 Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface 0.5%
• CVE-2023-25593 High 7.1 Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface 0.5%
• CVE-2023-25592 High 7.1 Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface 0.5%
• CVE-2023-25591 High 7.6 Authenticated Information Disclosure in ClearPass Policy Manager Web-Based Management Interface 0.6%
• CVE-2023-25590 High 7.8 Local Privilege Escalation in ClearPass OnGuard Linux Agent 0.2%
• CVE-2023-25589 Critical 9.8 Unauthenticated Arbitrary User Creation Leads to Complete System Compromise 1.0%
• CVE-2022-43540 Medium 5.5 A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow a 0.2%
• CVE-2022-43539 Medium 5.7 A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exp 0.3%
• CVE-2022-43538 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an att 1.5%
• CVE-2022-43537 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an att 1.5%
• CVE-2022-43536 High 7.2 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an att 1.5%
• CVE-2022-43535 High 7.8 A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbit 0.2%
• CVE-2022-43534 High 7.8 A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary 0.2%
• CVE-2022-43533 High 7.8 A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrar 0.2%
• CVE-2022-43532 High 8.0 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an adminis 0.4%
• CVE-2022-43531 High 8.8 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager in 0.9%
• CVE-2022-43530 High 8.8 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager ins 1.0%