hpe Vulnerabilities and Affected Products
Vulnerabilities associated with aruba_clear_pass_policy_manager.
Products
Clear product- edgeconnect_sd-wan_orchestrator14 vulnerabilities
- insight_remote_support5 vulnerabilities
- HPE System Management Homepage before v7.64 vulnerabilities
- arba_access_points_running_instantos_and_arubaos_103 vulnerabilities
- aruba_clear_pass_policy_manager3 vulnerabilities
- aruba_networking_instantos1 vulnerability
- arubaos1 vulnerability
- cray_system_management_software1 vulnerability
- HPE Business Critical Hard Drives1 vulnerability
- HPE enhanced Internet Usage Manager (eIUM)1 vulnerability
- HPE MSE Msg Gw application E-LTU1 vulnerability
- HPE NVMe Mixed Use Solid State Drives1 vulnerability
- HPE SATA Read Intensive Solid State Drives1 vulnerability
- HPE Server Enterprise Hard Drives1 vulnerability
- HPE Server SAS Hard Drives1 vulnerability
- HPE Server SATA Hard Drives1 vulnerability
- HPE Server Solid State Drives1 vulnerability
- HPE Service Pack for ProLiant1 vulnerability
- HPE Superdome Flex Server1 vulnerability
- HPE System Management Homepage (SMH)1 vulnerability
- HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy1 vulnerability
- hpe_athonet_mobile_care1 vulnerability
- Integrated Lights-Out1 vulnerability
- NetBatch-Plus software1 vulnerability
- NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-43509MEDIUM | Unauthenticated Endpoint Allows Sending Arbitrary OnGuard NotificationsA vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading malicious software. CWE-79Oct 24, 2023 | CVSS5.8v3.1 | EPSS0.567% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-43507HIGH | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management InterfaceA vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster. CWE-89Oct 24, 2023 | CVSS7.2v3.1 | EPSS0.796% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-43506HIGH | Local Privilege Escalation in ClearPass OnGuard Linux AgentA vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance. CWE-269Oct 24, 2023 | CVSS7.8v3.1 | EPSS0.213% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |