Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-1389. PoCs published by Cristiano Maruti.
AI-analyzed exploit summary This is a detailed writeup describing a stored XSS vulnerability in Aruba ClearPass Policy Manager 6.4. The exploit involves injecting malicious JavaScript via the login form, which is later executed when an admin reviews access logs.
Description
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action.
Exploits (1)
This is a detailed writeup describing a stored XSS vulnerability in Aruba ClearPass Policy Manager 6.4. The exploit involves injecting malicious JavaScript via the login form, which is later executed when an admin reviews access logs.