Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-26272 State: PUBLISHED Published: 2024-10-22T14:50:41.505Z Last Updated: 2024-10-22T15:17:20.008Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-352 Description: Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.3.2 through 7.4.3.107, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92 and 7.3 GA through update 35 allows remote attackers to (1) change user passwords, (2) shut down the server, (3) execute arbitrary code in the scripting console, (4) and perform other administrative actions via the p_l_bac
erver, (3) execute arbitrary code in the scripting console, (4) and perform other administrative actions via the p_l_back_url parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2024-26272
CVE ID: CVE-2024-26273 State: PUBLISHED Published: 2024-10-22T15:01:29.395Z Last Updated: 2025-08-22T03:55:49.322Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-352 Description: Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.4.0 through 7.4.3.103, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92 and 7.3 update 29 through update 35 allows remote attackers to (1) change user passwords, (2) shut down the server, (3) execute arbitrary code in the scripting console, (4) and perform other administrative actions via the
n the server, (3) execute arbitrary code in the scripting console, (4) and perform other administrative actions via the _com_liferay_commerce_catalog_web_internal_portlet_CommerceCatalogsPortlet_redirect parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2024-26273
CVE ID: CVE-2024-26275 State: PUBLISHED Published: 2024-04-09T08:34:36.604Z Last Updated: 2024-08-13T07:54:00.911Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: JT2Go, Parasolid V35.1, Parasolid V36.0, Parasolid V36.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (
(All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-222019.html - https://cert-portal.siemens.com/productcert/html/ssa-771940.html
CVE ID: CVE-2024-26276 State: PUBLISHED Published: 2024-04-09T08:34:37.744Z Last Updated: 2024-08-13T07:54:02.376Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Siemens Products: JT2Go, Parasolid V35.1, Parasolid V36.0, Parasolid V36.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-770 Description: A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (A
All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-222019.html - https://cert-portal.siemens.com/productcert/html/ssa-771940.html
CVE ID: CVE-2024-26277 State: PUBLISHED Published: 2024-04-09T08:34:38.896Z Last Updated: 2024-08-13T07:54:03.735Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Siemens Products: JT2Go, Parasolid V35.1, Parasolid V36.0, Parasolid V36.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-476 Description: A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (A
All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted X_T files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-222019.html - https://cert-portal.siemens.com/productcert/html/ssa-771940.html
CVE ID: CVE-2024-26278 State: PUBLISHED Published: 2024-07-09T16:15:44.821Z Last Updated: 2025-03-14T04:35:37.574Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: CWE-79 Description: The Custom Fields component not correctly filter inputs, leading to a XSS vector. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://developer.joomla.org/security-centre/939-20240705-core-xss-in-com-fields-default-field-value.html
CVE ID: CVE-2024-26279 State: PUBLISHED Published: 2024-07-09T16:15:48.485Z Last Updated: 2025-03-26T04:34:05.778Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: CWE-79 Description: The wrapper extensions do not correctly validate inputs, leading to XSS vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://developer.joomla.org/security-centre/938-20240704-core-xss-in-wrapper-extensions.html
CVE ID: CVE-2024-26280 State: PUBLISHED Published: 2024-03-01T11:05:54.480Z Last Updated: 2025-02-13T17:41:11.624Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-276 Description: Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view. With 2.8.2 and newer, Ops and Viewer users do not have audit log permission by default, they need to be explicitly granted permissions to see the logs. Only admin users have audit log permission by default. Users of Apache Airflow are recommended to upgrade to version 2.8.2
y admin users have audit log permission by default. Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/airflow/pull/37501 - https://lists.apache.org/thread/knskxxxml95091rsnpxkpo1jjp8rj0fh - http://www.openwall.com/lists/oss-security/2024/03/01/1
CVE ID: CVE-2024-26281 State: PUBLISHED Published: 2024-02-22T14:56:45.803Z Last Updated: 2024-11-20T16:31:49.439Z Vendors: Mozilla Products: Firefox for iOS Problem Types: QR code scanner allowed executing a JavaScript URI Description: Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the current top origin sites in the URL bar. This vulnerability affects Firefox for iOS < 123. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1868005 - https://www.mozilla.org/security/advisories/mfsa2024-08/
CVE ID: CVE-2024-26282 State: PUBLISHED Published: 2024-02-22T14:56:44.758Z Last Updated: 2025-03-13T16:15:11.466Z Vendors: Mozilla Products: Firefox for iOS Problem Types: UXSS through a canonical element Description: Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. This vulnerability affects Firefox for iOS < 123. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1863788 - https://www.mozilla.org/security/advisories/mfsa2024-08/
CVE ID: CVE-2024-26283 State: PUBLISHED Published: 2024-02-22T14:56:43.860Z Last Updated: 2024-08-29T13:55:40.992Z Vendors: Mozilla Products: Firefox for iOS Problem Types: Address bar spoofing using Firefox custom open URL scheme Description: An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme. This vulnerability affects Firefox for iOS < 123. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1850158 - https://www.mozilla.org/security/advisories/mfsa2024-08/
CVE ID: CVE-2024-26284 State: PUBLISHED Published: 2024-02-22T14:56:42.004Z Last Updated: 2025-03-28T18:30:43.012Z Vendors: Mozilla Products: Focus for iOS Problem Types: UXSS exploit via 302 Redirect Description: Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website, if the victim had a link to the attacker's website. This vulnerability affects Focus for iOS < 123. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1860075 - https://www.mozilla.org/security/advisories/mfsa2024-10/
CVE ID: CVE-2024-26287 State: REJECTED Published: N/A Last Updated: 2024-02-22T11:33:01.125Z Description: No description available.
CVE ID: CVE-2024-26288 State: PUBLISHED Published: 2024-03-12T08:13:05.195Z Last Updated: 2024-08-02T00:07:19.074Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: PHOENIX CONTACT Products: CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, CHARX SEC-3150 Problem Types: CWE-319 Description: An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2024-011
CVE ID: CVE-2024-26289 State: PUBLISHED Published: 2024-05-27T07:01:52.386Z Last Updated: 2024-08-02T00:07:19.301Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PMB Services Products: PMB Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md - https://forge.sigb.net/projects/pmb/files
CVE ID: CVE-2024-26290 State: PUBLISHED Published: 2025-03-12T19:45:08.869Z Last Updated: 2025-04-15T22:22:19.344Z Vendors: Avid Products: Avid NEXIS E-series, Avid NEXIS F-series, Avid NEXIS PRO+, System Director Appliance (SDA+) Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permissions.This issue affects Avid NEXIS E-series: before 2024.6.0; Avid NEXIS F-series: before 2024.6.0; Avid NEXIS PRO+: before 2024.6.0; System Director Appliance (SDA+): befor
024.6.0; Avid NEXIS F-series: before 2024.6.0; Avid NEXIS PRO+: before 2024.6.0; System Director Appliance (SDA+): before 2024.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.drive-byte.de/en/blog/avid-nexis-agent-multiple-vulnerabilities - https://kb.avid.com/pkb/articles/troubleshooting/en239659
CVE ID: CVE-2024-26291 State: PUBLISHED Published: 2025-07-14T08:12:16.139Z Last Updated: 2025-07-14T15:06:09.582Z Vendors: Avid Products: Avid NEXIS E-series, Avid NEXIS F-series, Avid NEXIS PRO+, System Director Appliance (SDA+) Problem Types: CWE-285 Description: An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers are able to obtain sensitive information. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Av
sensitive information. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://resources.avid.com/SupportFiles/attach/AvidNEXIS/AvidNEXIS_2025_5_1_ReadMe.pdf - https://raeph123.github.io/BlogPosts/Avid_Nexis/Advisory_Avid_Nexus_Agent_Multiple_Vulnerabilities_en.html
CVE ID: CVE-2024-26292 State: PUBLISHED Published: 2025-07-14T08:19:58.940Z Last Updated: 2025-07-14T15:07:16.152Z Vendors: Avid Products: Avid NEXIS E-series, Avid NEXIS F-series, Avid NEXIS PRO+, System Director Appliance (SDA+) Problem Types: CWE-22 Description: An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://resources.avid.com/SupportFiles/attach/AvidNEXIS/AvidNEXIS_2025_5_1_ReadMe.pdf -
ADP Vulnrichment: References: - https://resources.avid.com/SupportFiles/attach/AvidNEXIS/AvidNEXIS_2025_5_1_ReadMe.pdf - https://raeph123.github.io/BlogPosts/Avid_Nexis/Advisory_Avid_Nexus_Agent_Multiple_Vulnerabilities_en.html
CVE ID: CVE-2024-26293 State: PUBLISHED Published: 2025-07-14T09:18:18.045Z Last Updated: 2025-07-14T14:40:41.420Z Vendors: Avid Products: Avid NEXIS E-series, Avid NEXIS F-series, Avid NEXIS PRO+, System Director Appliance (SDA+) Problem Types: CWE-1395 Description: The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
5.5.1; System Director Appliance (SDA+): before 2025.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://resources.avid.com/SupportFiles/attach/AvidNEXIS/AvidNEXIS_2025_5_1_ReadMe.pdf - https://raeph123.github.io/BlogPosts/Avid_Nexis/Advisory_Avid_Nexus_Agent_Multiple_Vulnerabilities_en.html - https://www.genivia.com/changelog.html
CVE ID: CVE-2024-26294 State: PUBLISHED Published: 2024-02-27T21:54:21.857Z Last Updated: 2024-08-02T00:07:18.955Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
e system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE ID: CVE-2024-26295 State: PUBLISHED Published: 2024-02-27T21:56:22.295Z Last Updated: 2024-08-02T00:07:19.403Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
CVE ID: CVE-2024-26296 State: PUBLISHED Published: 2024-02-27T21:57:24.846Z Last Updated: 2024-08-02T00:07:19.027Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
CVE ID: CVE-2024-26297 State: PUBLISHED Published: 2024-02-27T22:03:55.507Z Last Updated: 2024-08-02T00:07:19.261Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
CVE ID: CVE-2024-26298 State: PUBLISHED Published: 2024-02-27T22:04:58.511Z Last Updated: 2024-08-02T00:07:19.557Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
CVE ID: CVE-2024-26299 State: PUBLISHED Published: 2024-02-27T22:05:37.624Z Last Updated: 2024-11-04T18:44:31.292Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment
t code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE ID: CVE-2024-26300 State: PUBLISHED Published: 2024-02-27T22:06:49.616Z Last Updated: 2024-11-07T11:07:53.761Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
tim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE ID: CVE-2024-26301 State: PUBLISHED Published: 2024-02-27T22:10:54.804Z Last Updated: 2025-03-13T16:43:00.369Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager. Additional Analyst Notes: - CVE Program Container: - CISA A
s to network services supported by ClearPass Policy Manager. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE ID: CVE-2024-26302 State: PUBLISHED Published: 2024-02-27T22:11:37.929Z Last Updated: 2025-08-27T15:41:33.954Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
s to network services supported by ClearPass Policy Manager. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE ID: CVE-2024-26303 State: PUBLISHED Published: 2024-03-26T20:25:44.252Z Last Updated: 2024-10-31T15:11:42.444Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: ArubaOS-S Switch Description: Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-003.txt