Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29095 State: PUBLISHED Published: 2021-03-25T20:34:59.374007Z Last Updated: 2024-09-16T21:02:24.653Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-824 Description: Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account. Additional Analyst Notes: - CVE Program Container: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image
CVE ID: CVE-2021-29096 State: PUBLISHED Published: 2021-03-25T18:37:37.051791Z Last Updated: 2024-09-17T03:42:41.962Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Esri Products: ArcReader, ArcGIS Desktop, ArcGIS Engine, ArcGIS Desktop Background Geoprocessing, ArcGIS Engine Background Geoprocessing Problem Types: CWE-416 Description: A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container:
achieve arbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/ - https://www.zerodayinitiative.com/advisories/ZDI-21-370/
CVE ID: CVE-2021-29097 State: PUBLISHED Published: 2021-03-25T20:36:03.915336Z Last Updated: 2024-09-17T03:17:27.744Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Esri Products: ArcReader, ArcGIS Desktop, ArcGIS Engine, ArcGIS Pro, ArcGIS Desktop Background Geoprocessing Problem Types: CWE-122, CWE-121 Description: Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: Reference
rbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/ - https://www.zerodayinitiative.com/advisories/ZDI-21-367/ - https://www.zerodayinitiative.com/advisories/ZDI-21-371/ - https://www.zerodayinitiative.com/advisories/ZDI-21-364/ - https://www.zerodayinitiative.com/advisories/ZDI-21-363/ - https://www.zerodayinitiative.com/advisories/ZDI-21-369/ - https://www.zerodayinitiative.com/advisories/ZDI-21-368/ - https://www.zerodayinitiative.com/advisories/ZDI-21-365/ - https://www.zerodayinitiative.com/advisories/ZDI-21-360/
CVE ID: CVE-2021-29098 State: PUBLISHED Published: 2021-03-25T20:37:05.516Z Last Updated: 2025-04-10T15:22:04.460Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Esri Products: ArcReader, ArcGIS Desktop, ArcGIS Engine, ArcGIS Pro, ArcGIS Desktop Background Geoprocessing Problem Types: CWE-824 Description: Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
ry code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/ - https://www.zerodayinitiative.com/advisories/ZDI-21-361/ - https://www.zerodayinitiative.com/advisories/ZDI-21-362/ - https://www.zerodayinitiative.com/advisories/ZDI-21-372/
CVE ID: CVE-2021-29099 State: PUBLISHED Published: 2021-06-07T11:47:19.951Z Last Updated: 2025-04-10T15:01:07.559Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-89 Description: A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed (not customer datasets). Web Services that use file based data sources (file Geodatabase or Shape Files or tile cached services) are unaffected by this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
vices) are unaffected by this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-e21-03-server-sql/
CVE ID: CVE-2021-29100 State: PUBLISHED Published: 2021-05-05T15:16:13.177Z Last Updated: 2025-04-10T15:21:55.572Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Esri Products: ArcGIS Earth Problem Types: CWE-23 Description: A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS Earth by inducing the user to upload a crafted file to an affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
to upload a crafted file to an affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-earth/administration/arcgis-earth-security-update
CVE ID: CVE-2021-29101 State: PUBLISHED Published: 2021-05-05T18:21:27.314Z Last Updated: 2025-04-10T15:21:47.839Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Esri Products: ArcGIS GeoEvent Server Problem Types: CWE-23 Description: ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-securi
References: - https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1
CVE ID: CVE-2021-29102 State: PUBLISHED Published: 2021-07-11T01:28:15.394Z Last Updated: 2025-04-10T15:00:22.287Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administr
Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/
CVE ID: CVE-2021-29103 State: PUBLISHED Published: 2021-07-11T01:16:28.826Z Last Updated: 2025-04-10T15:00:29.311Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A reflected Cross Site Scripting (XXS) vulnerability in ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-secur
lnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/
CVE ID: CVE-2021-29104 State: PUBLISHED Published: 2021-07-11T01:39:41.853Z Last Updated: 2025-04-10T15:00:11.879Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/
CVE ID: CVE-2021-29105 State: PUBLISHED Published: 2021-07-11T01:11:36.814Z Last Updated: 2025-04-10T15:00:38.088Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below may allow a remote authenticated attacker to pass and store malicious strings in the ArcGIS Services Directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/
CVE ID: CVE-2021-29106 State: PUBLISHED Published: 2021-07-10T14:26:11.746Z Last Updated: 2025-04-10T15:00:45.264Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-
DP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/
CVE ID: CVE-2021-29107 State: PUBLISHED Published: 2021-07-10T14:23:45.846Z Last Updated: 2025-04-10T15:00:53.604Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/
CVE ID: CVE-2021-29108 State: PUBLISHED Published: 2021-10-01T14:41:33.989Z Last Updated: 2025-04-10T14:59:54.052Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Esri Products: Portal for ArcGIS Problem Types: CWE-347 Description: There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrapping Attack). In addition patching, Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted. Additional Analyst Notes:
Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021-Update-1-Patch/ - https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Organization-Specific_Logins_FAQs.pdf
CVE ID: CVE-2021-29109 State: PUBLISHED Published: 2021-10-01T14:51:28.177Z Last Updated: 2025-04-10T14:59:44.293Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Problem Types: CWE-79 Description: A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021
References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021-Update-1-Patch/
CVE ID: CVE-2021-29110 State: PUBLISHED Published: 2021-10-01T14:59:24.718Z Last Updated: 2025-04-10T14:59:36.000Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021-Update-1-Patch/
CVE ID: CVE-2021-29112 State: PUBLISHED Published: 2022-08-12T18:40:27.411Z Last Updated: 2025-04-10T14:58:31.283Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Esri Products: ArcReader Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-desktop/administration/arcreader-general-data-frame-security-update/
CVE ID: CVE-2021-29113 State: PUBLISHED Published: 2021-12-07T10:48:48.897Z Last Updated: 2025-04-10T14:59:26.919Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-98 Description: A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-2-patch-is-now-available
CVE ID: CVE-2021-29114 State: PUBLISHED Published: 2021-12-07T10:51:39.544Z Last Updated: 2025-04-10T14:59:11.832Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-89 Description: A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-20
ment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-2-patch-is-now-available
CVE ID: CVE-2021-29115 State: PUBLISHED Published: 2021-12-07T10:56:55.260Z Last Updated: 2025-04-10T14:59:02.069Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-200 Description: An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose features. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-s
CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-2-patch-is-now-available
CVE ID: CVE-2021-29116 State: PUBLISHED Published: 2021-12-07T11:00:53.382Z Last Updated: 2025-04-10T14:58:53.616Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: ArcGIS Server Problem Types: CWE-79 Description: A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esr
ser’s browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-2-patch-is-now-available
CVE ID: CVE-2021-29117 State: PUBLISHED Published: 2022-08-12T18:45:12.867Z Last Updated: 2025-04-10T14:58:21.962Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Esri Products: ArcReader Problem Types: CWE-416 Description: A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-desktop/administration/arcreader-general-data-frame-security-update/
CVE ID: CVE-2021-29118 State: PUBLISHED Published: 2022-08-12T18:40:09.061Z Last Updated: 2025-04-10T14:58:42.000Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Esri Products: ArcReader Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/arcgis-desktop/administration/arcreader-general-data-frame-security-update/
CVE ID: CVE-2021-29133 State: PUBLISHED Published: 2021-03-24T06:32:44 Last Updated: 2024-08-03T22:02:50.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/14833 - https://gitlab.alpinelinux.org/alpine/aports/-/issues/12539 - https://twitter.com/steaIth/status/1364940271054712842 - https://github.com/rapid7/metasploit-framework/pull/14833/commits/5bf6b2d094deb22fa8183ce161b90cbe4fd40a70
CVE ID: CVE-2021-29134 State: PUBLISHED Published: 2022-03-15T20:30:58 Last Updated: 2024-08-03T22:02:50.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/pull/15125/files - https://github.com/go-gitea/gitea/releases/tag/v1.13.6
CVE ID: CVE-2021-29136 State: PUBLISHED Published: 2021-04-06T15:57:49 Last Updated: 2024-08-03T22:02:50.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/04/06/2 - https://github.com/opencontainers/umoci/security/advisories/GHSA-9m95-8hx6-7p9v - https://github.com/opencontainers/umoci/commit/d9efc31daf2206f7d3fdb839863cf7a576a2eb57
CVE ID: CVE-2021-29137 State: PUBLISHED Published: 2021-04-29T11:10:12 Last Updated: 2024-08-03T22:02:50.537Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote url redirection Description: A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-29138 State: PUBLISHED Published: 2021-04-29T12:25:07 Last Updated: 2024-08-03T22:02:50.572Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote disclosure of privileged information Description: A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29139 State: PUBLISHED Published: 2021-04-29T13:16:56 Last Updated: 2024-08-03T22:02:51.036Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote cross site scripting (xss) Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29140 State: PUBLISHED Published: 2021-04-29T12:19:12 Last Updated: 2024-08-03T22:02:50.624Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote xml external entity (xxe) Description: A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE ID: CVE-2021-29141 State: PUBLISHED Published: 2021-04-29T13:30:59 Last Updated: 2024-08-03T22:02:50.548Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote disclosure of sensitive information Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt