CVE-2022-23673 PUBLISHED CVSS 9 CRITICAL

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

EPSS 3.87% · 88.1th percentile

Risk Scores

CVSS v2.0
9
EPSS Score
3.87%
88.1th percentile

Affected Products

VendorProductVersions
arubanetworksclearpass_policy_manager6.8.9, 0, 6.8.0
n/aAruba ClearPass Policy Manager6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below

Timeline

References

Open in Interactive Console →