Hewlett Packard Enterprise Aruba ClearPass
4 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-7060 | 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could m | HIGH 8.8 | 0.5 % | ||
| CVE-2018-7058 | 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 | Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this | CRITICAL 9.8 | 3.9 % | ||
| CVE-2017-9002 | All versions prior to v6.6.8 | All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an | MEDIUM 6.1 | 0.9 % | ||
| CVE-2017-9001 | All versions prior to 6.6.8 | Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failure | HIGH 8.1 | 7.3 % |