Vulnerabilities > Arubanetworks > Clearpass > 6.7.7

DATE CVE VULNERABILITY TITLE RISK
2020-04-16 CVE-2020-7111 Injection vulnerability in Arubanetworks Clearpass
A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass.
network
low complexity
arubanetworks CWE-74
6.5
6.5
2020-04-16 CVE-2020-7110 Cross-site Scripting vulnerability in Arubanetworks Clearpass
ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass that could be executed resulting in a privilege escalation attack. 		3.5
3.5