Vulnerability Details CVE-2021-29146
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2021-29146
-
cpe:2.3:a:arubanetworks:clearpass:6.7.0
-
cpe:2.3:a:arubanetworks:clearpass:6.7.1
-
cpe:2.3:a:arubanetworks:clearpass:6.7.10
-
cpe:2.3:a:arubanetworks:clearpass:6.7.11
-
cpe:2.3:a:arubanetworks:clearpass:6.7.12
-
cpe:2.3:a:arubanetworks:clearpass:6.7.13
-
cpe:2.3:a:arubanetworks:clearpass:6.7.14
-
cpe:2.3:a:arubanetworks:clearpass:6.7.2
-
cpe:2.3:a:arubanetworks:clearpass:6.7.3
-
cpe:2.3:a:arubanetworks:clearpass:6.7.4
-
cpe:2.3:a:arubanetworks:clearpass:6.7.5
-
cpe:2.3:a:arubanetworks:clearpass:6.7.6
-
cpe:2.3:a:arubanetworks:clearpass:6.7.7
-
cpe:2.3:a:arubanetworks:clearpass:6.7.8
-
cpe:2.3:a:arubanetworks:clearpass:6.7.9
-
cpe:2.3:a:arubanetworks:clearpass:6.8.0
-
cpe:2.3:a:arubanetworks:clearpass:6.8.1
-
cpe:2.3:a:arubanetworks:clearpass:6.8.2
-
cpe:2.3:a:arubanetworks:clearpass:6.8.3
-
cpe:2.3:a:arubanetworks:clearpass:6.8.4
-
cpe:2.3:a:arubanetworks:clearpass:6.8.5
-
cpe:2.3:a:arubanetworks:clearpass:6.8.6
-
cpe:2.3:a:arubanetworks:clearpass:6.8.8
-
cpe:2.3:a:arubanetworks:clearpass:6.9.0
-
cpe:2.3:a:arubanetworks:clearpass:6.9.1
-
cpe:2.3:a:arubanetworks:clearpass:6.9.4