Vulnerability Details CVE-2021-29140
A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.2%
CVSS Severity
CVSS v3 Score 8.2
CVSS v2 Score 6.4
References
Products affected by CVE-2021-29140
-
cpe:2.3:a:arubanetworks:clearpass:6.7.0
-
cpe:2.3:a:arubanetworks:clearpass:6.7.1
-
cpe:2.3:a:arubanetworks:clearpass:6.7.10
-
cpe:2.3:a:arubanetworks:clearpass:6.7.11
-
cpe:2.3:a:arubanetworks:clearpass:6.7.12
-
cpe:2.3:a:arubanetworks:clearpass:6.7.2
-
cpe:2.3:a:arubanetworks:clearpass:6.7.3
-
cpe:2.3:a:arubanetworks:clearpass:6.7.4
-
cpe:2.3:a:arubanetworks:clearpass:6.7.5
-
cpe:2.3:a:arubanetworks:clearpass:6.7.6
-
cpe:2.3:a:arubanetworks:clearpass:6.7.7
-
cpe:2.3:a:arubanetworks:clearpass:6.7.8
-
cpe:2.3:a:arubanetworks:clearpass:6.7.9
-
cpe:2.3:a:arubanetworks:clearpass:6.8.0
-
cpe:2.3:a:arubanetworks:clearpass:6.8.1
-
cpe:2.3:a:arubanetworks:clearpass:6.8.2
-
cpe:2.3:a:arubanetworks:clearpass:6.8.3