Approved changes feed: RSS · Atom

cpe:2.3:a:hpe:aruba_clear_pass_policy_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHpe (8bc0c2a2-a9de-5f61-aa1f-0aa716beac6b)
ProductAruba Clear Pass Policy Manager (bafae6fd-096b-5f71-a4b3-1b8f851f0e7d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43509 vulnerable 2026-06-08 06:12:31.772768 Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications
MEDIUM (5.8)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading malicious software.
Published: 2023-10-24T18:13:15.076Z
Updated: 2024-09-11T17:42:00.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43507 vulnerable 2026-06-08 06:12:31.769290 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
HIGH (7.2)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster.
Published: 2023-10-24T18:10:06.158Z
Updated: 2024-09-11T17:46:38.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43506 vulnerable 2026-06-08 06:12:31.756237 Local Privilege Escalation in ClearPass OnGuard Linux Agent
HIGH (7.8)
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.
Published: 2023-10-24T18:08:31.010Z
Updated: 2024-09-11T17:50:00.081Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.