Aruba Clearpass Policy Manager 漏洞

时间轴

版本

6.9.094
6.9.194
6.9.294
6.9.394
6.9.494

修正

Official Fix97
Temporary Fix0
Workaround0
Unavailable0
Not Defined27

易受攻击性

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined123

访问向量

Not Defined0
Physical0
Local6
Adjacent3
Network115

身份验证

Not Defined0
High6
Low97
None21

用户交互

Not Defined0
Required16
None108

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤49
≤515
≤613
≤743
≤835
≤98
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤49
≤515
≤645
≤719
≤827
≤97
≤101

VulDB

≤10
≤20
≤32
≤411
≤521
≤66
≤749
≤816
≤918
≤101

NVD

≤10
≤20
≤30
≤40
≤53
≤61
≤79
≤824
≤911
≤102

CNA

≤10
≤20
≤30
≤40
≤52
≤63
≤72
≤811
≤92
≤101

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k12
<2k32
<5k49
<10k11
<25k20
<50k0
<100k0
≥100k0

本日攻击

<1k78
<2k14
<5k12
<10k12
<25k8
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (77): 6.0, 6.1, 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.3, 6.4, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.6, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.7, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.5, 6.7.6, 6.7.7, 6.7.8, 6.7.9, 6.7.11, 6.7.12, 6.7.13, 6.7.14, 6.8, 6.8.1, 6.8.2, 6.8.3, 6.8.4, 6.8.5, 6.8.6, 6.8.7, 6.8.8, 6.8.9, 6.8.9-HF2, 6.9, 6.9.1, 6.9.2, 6.9.3, 6.9.4, 6.9.5, 6.9.6, 6.9.7, 6.9.8, 6.9.9, 6.9.11, 6.9.12, 6.10.1, 6.10.2, 6.10.3, 6.10.4, 6.10.5, 6.10.6, 6.10.7

软件类型: Policy Management Software

已发布BaseTemp漏洞0day今天修正CTICVE
2023-10-255.45.4Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43508
2023-10-255.55.4Aruba ClearPass Policy Manager Web-based Management Interface 未知漏洞$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-43509
2023-10-257.47.3Aruba ClearPass Policy Manager Web-based Management Interface SQL注入$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43507
2023-10-255.85.7Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43510
2023-03-225.85.8Aruba ClearPass Policy Manager Web-based Management Interface 跨网站脚本$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2023-25593
2023-03-225.85.8Aruba ClearPass Policy Manager Web-based Management Interface 跨网站脚本$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2023-25592
2023-03-223.93.9Aruba ClearPass Policy Manager 信息公开$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2023-25596
2023-03-227.17.1Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2023-25594
2023-03-226.16.1Aruba ClearPass Policy Manager Web-based Management Interface 信息公开$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2023-25591
2023-03-228.58.5Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2023-25589
2023-01-055.45.4Aruba ClearPass Policy Manager Web-based Management Interface 跨网站脚本$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2022-43532
2023-01-054.94.9Aruba ClearPass Policy Manager OnGuard Agent 信息公开$5k-$25k$0-$5kNot DefinedNot Defined0.04CVE-2022-43540
2023-01-054.24.2Aruba ClearPass Policy Manager 信息公开$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-43539
2023-01-058.38.3Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-43535
2023-01-058.38.3Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-43533
2023-01-058.88.8Aruba ClearPass Policy Manager Web-based Management Interface SQL注入$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2022-43531
2023-01-058.88.8Aruba ClearPass Policy Manager Web-based Management Interface SQL注入$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2022-43530
2023-01-057.87.8Aruba ClearPass Policy Manager OnGuard Linux Agent Local Privilege Escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-43534
2023-01-057.27.2Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-43538
2023-01-057.27.2Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-43537
2023-01-057.77.7Aruba ClearPass Policy Manager Web-based Management Interface 权限升级$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2022-43536
2022-09-214.34.3Aruba ClearPass Policy Manager Web-based Management Interface 跨网站请求伪造$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-23685
2022-09-215.95.9Aruba ClearPass Policy Manager Guest User Interface 拒绝服务$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2022-37884
2022-09-218.38.3Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-37877
2022-09-217.57.5Aruba ClearPass Policy Manager Web-based Management Interface SQL注入$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2022-23696

99 更多条目未显示

更多条目由 Aruba

Want to stay up to date on a daily basis?

Enable the mail alert feature now!