High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-25	CVE-2023-43506	Unspecified vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. local low complexity arubanetworks	7.8
2023-10-25	CVE-2023-43507	SQL Injection vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. network low complexity arubanetworks CWE-89	8.8
2023-03-22	CVE-2023-25590	Improper Privilege Management vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. local low complexity arubanetworks CWE-269	7.8
2023-03-22	CVE-2023-25594	Incorrect Authorization vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. network low complexity arubanetworks CWE-863	8.8
2023-01-05	CVE-2022-43530	SQL Injection vulnerability in Arubanetworks Clearpass Policy Manager Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. network low complexity arubanetworks CWE-89	8.8
2023-01-05	CVE-2022-43531	SQL Injection vulnerability in Arubanetworks Clearpass Policy Manager Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. network low complexity arubanetworks CWE-89	8.8
2023-01-05	CVE-2022-43533	Unspecified vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. local low complexity arubanetworks	7.8
2023-01-05	CVE-2022-43534	Unspecified vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. local low complexity arubanetworks	7.8
2023-01-05	CVE-2022-43535	Unspecified vulnerability in Arubanetworks Clearpass Policy Manager A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. local low complexity arubanetworks	7.8
2023-01-05	CVE-2022-43536	OS Command Injection vulnerability in Arubanetworks Clearpass Policy Manager Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. network low complexity arubanetworks CWE-78	8.8