A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
References
| Link | Resource |
|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt | Broken Link |
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt | Broken Link |
Configurations
Configuration 1 (hide)
|
History
27 Mar 2025, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_3:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_2:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:-:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:-:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.12.0:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_6:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_5:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_2:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_4:*:*:*:*:*:* |
|
| References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt - Broken Link | |
| First Time |
Arubanetworks clearpass Policy Manager
Arubanetworks |
Information
Published : 2024-02-27 22:15
Updated : 2025-03-27 15:06
NVD link : CVE-2024-26299
Mitre link : CVE-2024-26299
CVE.ORG link : CVE-2024-26299
JSON object : View
Products Affected
arubanetworks
- clearpass_policy_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')