6.3.4

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-16	CVE-2022-23663	OS Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. network low complexity arubanetworks CWE-78 critical	9.0
2022-05-16	CVE-2022-23664	OS Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. network low complexity arubanetworks CWE-78 critical	9.0
2022-05-16	CVE-2022-23665	OS Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. network low complexity arubanetworks CWE-78 critical	9.0
2022-05-16	CVE-2022-23666	OS Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. network low complexity arubanetworks CWE-78 critical	9.0
2021-02-23	CVE-2021-26680	Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. network low complexity arubanetworks CWE-77 critical	9.0
2021-02-23	CVE-2021-26679	Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. network low complexity arubanetworks CWE-77 critical	9.0
2021-02-23	CVE-2021-26677	Unspecified vulnerability in Arubanetworks Clearpass Policy Manager A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. local low complexity arubanetworks	7.2
2021-02-23	CVE-2020-7120	Classic Buffer Overflow vulnerability in Arubanetworks Clearpass Policy Manager A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. local low complexity arubanetworks CWE-120	4.6
2021-02-23	CVE-2021-26686	SQL Injection vulnerability in Arubanetworks Clearpass Policy Manager A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. network low complexity arubanetworks CWE-89	5.5
2021-02-23	CVE-2021-26684	Command Injection vulnerability in Arubanetworks Clearpass Policy Manager A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. network low complexity arubanetworks CWE-77 critical	9.0