Aruba Networks Clearpass Policy Manager

Aruba ClearPass Manager Web UI Auth RCE
CVE-2025-25039 8.8 - High - February 04, 2025

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.

CVE-2025-23058: ClearPass Policy Manager Web UI Privilege Escalation
CVE-2025-23058 8.1 - High - February 04, 2025

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.

ClearPass Web UI Authenticated Directory Disclosure (CVE-2025-23059)
CVE-2025-23059 4.9 - Medium - February 04, 2025

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive data, potentially compromising the integrity and security of the entire system.

HPE Aruba ClearPass Policy Mgr: Unencrypted Data Exposure Allowing MITM
CVE-2025-23060 8.1 - High - February 04, 2025

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.

Arbitrary Command Execution in ClearPass Policy Manager Web Interface
CVE-2024-51772 8 - High - December 03, 2024

An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

HPE Aruba Networking ClearPass Policy Manager: Stored XSS Vulnerability in Web Interface
CVE-2024-51773 5.4 - Medium - December 03, 2024

A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting (XSS) attack. Successful exploitation could enable a threat actor to perform any actions the user is authorized to do, including accessing the user's data and altering information within the user's permissions. This could lead to data modification, deletion, or theft, including unauthorized access to files, file deletion, or the theft of session cookies, which an attacker could use to hijack a user's session.

Arbitrary Command Execution in Aruba ClearPass Policy Manager Web Interface
CVE-2024-53672 6.3 - Medium - December 03, 2024

A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.

HPE Aruba Networking ClearPass Policy Manager: Authenticated Remote Code Execution Vulnerability
CVE-2024-51771 8.8 - High - December 03, 2024

A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating system.

ClearPass Policy Manager SQL Injection via Authenticated Web Interface
CVE-2024-41915 8.8 - High - July 30, 2024

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster.

ClearPass Policy Manager Admin Cleartext Data Leak Vulnerability
CVE-2024-41916 4.9 - Medium - July 30, 2024

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

CVE-2024-5486: ClearPass Policy Manager Admin Read Sensitive Data in Cleartext
CVE-2024-5486 4.9 - Medium - July 30, 2024

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager

ClearPass Policy Manager XSS in Guest Interface
CVE-2024-26300 4.8 - Medium - February 27, 2024

A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

ClearPass Policy Manager: Remote Authenticated Info Disclosure
CVE-2024-26302 - February 27, 2024

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

ClearPass Policy Manager: Low-Privilege Auth Remote Info Disclosure
CVE-2024-26301 6.5 - Medium - February 27, 2024

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

ClearPass Policy Manager RCE: Remote Authenticated Cmd Exec
CVE-2024-26294 8.8 - High - February 27, 2024

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Aruba ClearPass PM RCE via Authenticated Web UI
CVE-2024-26295 8.8 - High - February 27, 2024

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

ClearPass Policy Manager Arbitrary Command Execution via Remote Authenticated Web UI
CVE-2024-26296 8.8 - High - February 27, 2024

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

ClearPass Policy Manager Remote Auth CmdExec CVE-2024-26297
CVE-2024-26297 8.8 - High - February 27, 2024

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

ClearPass Policy Manager: Remote Auth Cmd Exec (CVE-2024-26298)
CVE-2024-26298 8.8 - High - February 27, 2024

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

ClearPass PolicyManager Authenticated Remote XSS in Web UI
CVE-2024-26299 4.8 - Medium - February 27, 2024

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Privilege Escalation in ClearPass OnGuard Linux Agent via Local Abuse
CVE-2023-43506 7.8 - High - October 25, 2023

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

ClearPass Policy Manager SQLi in web mgmt interface
CVE-2023-43507 8.8 - High - October 25, 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster.

SQL Injection

ClearPass Auth Bypass - Read-Only Users Can Change State (CVE-2023-43508)
CVE-2023-43508 6.5 - Medium - October 25, 2023

Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of these vulnerabilities allow an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform.

AuthZ

Unauthenticated Send-Notification RCE in ClearPass Policy Manager
CVE-2023-43509 5.8 - Medium - October 25, 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading malicious software.

ClearPass Policy Manager Web UI RCE via Command Injection
CVE-2023-43510 6.3 - Medium - October 25, 2023

A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a non-privileged user on the underlying operating system leading to partial system compromise.

Command Injection

ClearPass OnGuard Agnt Linux UAC Escalation CVE-2023-25590
CVE-2023-25590 7.8 - High - March 22, 2023

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Improper Privilege Management

ClearPass Policy Manager Reflected XSS via Web UI
CVE-2023-25592 6.1 - Medium - March 22, 2023

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

XSS

Local RCE in ClearPass OnGuard Ubuntu Agent
CVE-2023-25595 5.5 - Medium - March 22, 2023

A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.

ClearPass Policy Manager Exposes Sensitive Data in Plaintext via Admin Privileges
CVE-2023-25596 4.9 - Medium - March 22, 2023

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

Cleartext Storage of Sensitive Information

ClearPass Policy Manager Lowprivilege Data Exposure via Web UI
CVE-2023-25591 6.5 - Medium - March 22, 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further privileges on the ClearPass instance.

Unauth Remote User Creation in Aruba ClearPass Policy Mgr Web UI
CVE-2023-25589 9.8 - Critical - March 22, 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise.

ClearPass Policy Manager ROP: Read-Only Users Can Execute State Changes
CVE-2023-25594 8.8 - High - March 22, 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform.

AuthZ

ClearPass Policy Manager Reflected XSS via Web UI
CVE-2023-25593 6.1 - Medium - March 22, 2023

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

XSS

Aruba ClearPass OnGuard macOS Agent Root Priv Escalation (6.9.12/6.10.7)
CVE-2022-43533 7.8 - High - January 05, 2023

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Privilege Escalation in Aruba ClearPass 6.10.7/6.9.12 OnGuard Linux Agent
CVE-2022-43534 7.8 - High - January 05, 2023

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Privilege Escalation in Aruba ClearPass OnGuard Agent (v6.10.7/6.9.12 and earlier)
CVE-2022-43535 7.8 - High - January 05, 2023

A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Local Info Disclosure in Aruba ClearPass OnGuard MacOS Agent (6.10.7/6.9.12)
CVE-2022-43540 5.5 - Medium - January 05, 2023

A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

ClearPass PM 6.10.x <=6.10.7, 6.9.x <=6.9.12: Auth SQLi in WebMgmt
CVE-2022-43531 8.8 - High - January 05, 2023

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

SQL Injection

Authenticated Stored XSS in Aruba ClearPass <=6.10.7 / 6.9.12
CVE-2022-43532 4.8 - Medium - January 05, 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

XSS

Aruba ClearPass PM RCE via Auth Web UI (6.10.7, 6.9.12)
CVE-2022-43536 8.8 - High - January 05, 2023

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Shell injection

Aruba ClearPass 6.10.7/6.9.12 Remote Auth Cmd Exec via Web Interface
CVE-2022-43537 7.2 - High - January 05, 2023

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Shell injection

Remote Authenticated RCE in Aruba ClearPass PM 6.10.7 (Fixed 6.10.8)
CVE-2022-43538 7.2 - High - January 05, 2023

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Shell injection

ClearPass PM 6.10.x/ClearPass 6.9.x: Cluster Comm Info Disclosure
CVE-2022-43539 4.5 - Medium - January 05, 2023

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a privileged user on the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

ClearPass PM 6.10.x SQLi via web UI auth access
CVE-2022-43530 8.8 - High - January 05, 2023

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

SQL Injection

ClearPass Policy Manager SQL Injection via Web UI (6.10.6, 6.9.11)
CVE-2022-23696 8.8 - High - September 20, 2022

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.

SQL Injection

ClearPass Policy Manager CSRF Remote Execution in <=6.10.6 & <=6.9.11
CVE-2022-23685 8.8 - High - September 20, 2022

A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against these endpoints if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.

Session Riding

ClearPass Policy Manager Web UI SQLi Versions <=6.10.6, Authed Remote
CVE-2022-23692 8.8 - High - September 20, 2022

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.

SQL Injection

SQLi in Aruba ClearPass Policy Manager 6.10.x and 6.9.x Web UI before 6.10.6
CVE-2022-23693 8.8 - High - September 20, 2022

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.

SQL Injection

Aruba ClearPass Policy Mgmt SQLi 6.10.x/6.9.x (<=6.10.6/<=6.9.11)
CVE-2022-23695 8.8 - High - September 20, 2022

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.

SQL Injection

ClearPass Policy Manager 6.x Web UI SQLi before 6.10.6 => DB Compromise
CVE-2022-23694 8.8 - High - September 20, 2022

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.

SQL Injection