CVE-2022-23659

A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
hpeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
arubanetworksclearpass_policy_manager
𝑥
< 6.8.9
arubanetworksclearpass_policy_manager
6.9.0 ≤
𝑥
< 6.9.10
arubanetworksclearpass_policy_manager
6.10.0 ≤
𝑥
< 6.10.5
arubanetworksclearpass_policy_manager
6.8.9
arubanetworksclearpass_policy_manager
6.8.9:hotfix1
arubanetworksclearpass_policy_manager
6.8.9:hotfix2
𝑥
= Vulnerable software versions