Hpe Aruba Networking Clearpass Policy Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_clearpass_policy_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Hpe Aruba Networking Clearpass Policy Manager (08c01a75-61d5-5d20-9231-12744ef21556) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23599 |
vulnerable | 2026-06-08 07:51:15.633556 |
Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux
HIGH (7.8)
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges.
Published: 2026-02-17T23:04:36.463Z
Updated: 2026-02-18T13:43:12.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37122 |
vulnerable | 2026-06-08 07:21:02.272456 |
Unauthenticated Reflected Cross-Site Scripting
MEDIUM (6.1)
A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting (XSS) attack. Successful exploitation could allow an attacker to execute arbitrary JavaScript code in a victim's browser in the context of the affected interface.
Published: 2025-09-17T19:31:19.915Z
Updated: 2025-09-17T19:42:07.283Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25039 |
vulnerable | 2026-06-08 07:12:50.533995 |
Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface
MEDIUM (4.7)
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.
Published: 2025-02-04T18:13:23.132Z
Updated: 2025-03-13T18:02:24.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23060 |
vulnerable | 2026-06-08 07:10:55.146547 |
Sensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)
MEDIUM (6.6)
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.
Published: 2025-02-04T18:11:41.371Z
Updated: 2025-03-13T14:09:34.595Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23059 |
vulnerable | 2026-06-08 07:10:55.146203 |
Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager
MEDIUM (6.8)
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive data, potentially compromising the integrity and security of the entire system.
Published: 2025-02-04T18:10:21.793Z
Updated: 2025-03-13T15:25:04.877Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23058 |
vulnerable | 2026-06-08 07:10:55.144546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53672 |
vulnerable | 2026-06-08 06:54:15.213141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51773 |
vulnerable | 2026-06-08 06:52:12.803968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51772 |
vulnerable | 2026-06-08 06:52:12.803446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51771 |
vulnerable | 2026-06-08 06:52:12.801933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.