Vulnerabilities > Arubanetworks > Clearpass Policy Manager > 6.6.8

DATE CVE VULNERABILITY TITLE RISK
2018-12-07 CVE-2018-7065 SQL Injection vulnerability in Arubanetworks Clearpass Policy Manager
An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation.
network
low complexity
arubanetworks CWE-89
7.2
7.2
2018-12-07 CVE-2018-7063 XXE vulnerability in Arubanetworks Clearpass Policy Manager
In Aruba ClearPass, disabled API admins can still perform read/write operations.
network
high complexity
arubanetworks CWE-611
8.1
8.1