Approved changes feed: RSS · Atom

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_2:*:*:*:*:*:*

part: a version: 6.9.13 update: cumulative_hotfix_patch_2

VendorArubanetworks (3287c295-e9c7-5718-acd2-a08960c91bf2)
ProductClearpass Policy Manager (a1d967da-f11a-5d43-9ce3-fd7a491b4289)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-26302 vulnerable 2026-06-08 06:31:26.293891 Details available
MEDIUM (4.8)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
Published: 2024-02-27T22:11:37.929Z
Updated: 2025-08-27T15:41:33.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26301 vulnerable 2026-06-08 06:31:26.292574 Details available
MEDIUM (6.5)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
Published: 2024-02-27T22:10:54.804Z
Updated: 2025-03-13T16:43:00.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26300 vulnerable 2026-06-08 06:31:26.291222 Details available
MEDIUM (6.6)
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Published: 2024-02-27T22:06:49.616Z
Updated: 2024-11-07T11:07:53.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26299 vulnerable 2026-06-08 06:31:26.290060 Details available
MEDIUM (6.6)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Published: 2024-02-27T22:05:37.624Z
Updated: 2024-11-04T18:44:31.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26298 vulnerable 2026-06-08 06:31:26.289188 Details available
HIGH (7.2)
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Published: 2024-02-27T22:04:58.511Z
Updated: 2024-08-02T00:07:19.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26297 vulnerable 2026-06-08 06:31:26.287596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26296 vulnerable 2026-06-08 06:31:26.286098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26295 vulnerable 2026-06-08 06:31:26.284658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26294 vulnerable 2026-06-08 06:31:26.278496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43510 vulnerable 2026-06-08 06:12:31.774550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43509 vulnerable 2026-06-08 06:12:31.773175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43508 vulnerable 2026-06-08 06:12:31.771748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43507 vulnerable 2026-06-08 06:12:31.769724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43506 vulnerable 2026-06-08 06:12:31.761712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.