n/a Aruba ClearPass Policy Manager

Name: n/a Aruba ClearPass Policy Manager
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

13critical44high26medium0low

updated 2026-10-28

vulnerabilities (83)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40988US	high7.2	3.93% (90th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2022-23657US	critical10.0	3.26% (88th)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2021-29147US	high8.8	3.22% (88th)	—	no fix	2021-04-29	≤ Prior to 6.9.5, 6.8.9, 6.7.14-HF1
CVE-2021-34611US	high7.2	3.02% (87th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-34610US	high7.2	3.02% (87th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-40998US	high7.2	2.90% (87th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-40987US	high7.2	2.90% (87th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-40986US	high7.2	2.90% (87th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-37739US	high7.2	2.90% (87th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2022-23660US	critical10.0	2.87% (87th)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23658US	critical10.0	2.87% (87th)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2021-26680US	high7.2	2.51% (85th)	—	no fix	2021-02-23	≤ Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1
CVE-2021-26679US	high7.2	2.51% (85th)	—	no fix	2021-02-23	≤ Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1
CVE-2021-26684US	high7.2	2.51% (85th)	—	no fix	2021-02-23	≤ Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1
CVE-2021-26683US	high7.2	2.51% (85th)	—	no fix	2021-02-23	≤ Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1
CVE-2021-26681US	high7.2	2.51% (85th)	—	no fix	2021-02-23	≤ Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1
CVE-2022-23666US	critical9.1	2.20% (82nd)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23665US	critical9.1	2.20% (82nd)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23664US	critical9.1	2.20% (82nd)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23663US	critical9.1	2.20% (82nd)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23662US	critical9.1	2.20% (82nd)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23661US	critical9.1	2.20% (82nd)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23673US	high7.2	2.20% (82nd)	—	no fix	2022-05-17	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23672US	high7.2	2.20% (82nd)	—	no fix	2022-05-17	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2021-40999US	high7.2	1.93% (80th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-29145US	critical9.8	1.90% (80th)	—	no fix	2021-04-29	≤ Prior to 6.9.5, 6.8.9, 6.7.14-HF1
CVE-2021-40997US	critical9.8	1.76% (78th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-40996US	critical9.8	1.76% (78th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2022-37883US	high7.2	1.59% (75th)	—	no fix	2022-09-20	2 versions
CVE-2022-37882US	high7.2	1.59% (75th)	—	no fix	2022-09-20	2 versions
CVE-2022-37881US	high7.2	1.59% (75th)	—	no fix	2022-09-20	2 versions
CVE-2022-37880US	high7.2	1.59% (75th)	—	no fix	2022-09-20	2 versions
CVE-2022-37879US	high7.2	1.59% (75th)	—	no fix	2022-09-20	2 versions
CVE-2021-29140US	high8.2	1.57% (75th)	—	no fix	2021-04-29	≤ Prior to 6.9.5, 6.8.9, 6.7.14-HF1
CVE-2021-37736US	critical9.8	1.56% (75th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2022-37878US	high7.2	1.50% (74th)	—	no fix	2022-09-20	2 versions
CVE-2022-23667US	high7.2	1.49% (74th)	—	no fix	2022-05-16	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2022-23671US	high7.5	1.31% (71st)	—	no fix	2022-05-17	≤ 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
CVE-2021-37738US	high7.5OT elevated	1.28% (70th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-26686US	medium6.5	1.28% (70th)	—	no fix	2021-02-23	≤ Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1
CVE-2021-29150US	high7.2	1.27% (70th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-40991US	high7.2	1.26% (69th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-34616US	medium6.3	1.25% (69th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-34615US	medium6.3	1.25% (69th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-34613US	medium6.3	1.25% (69th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-34612US	medium6.3	1.25% (69th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-34614US	medium6.3	1.25% (69th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-29152US	medium6.5	1.19% (68th)	—	no fix	2021-07-08	≤ Prior to 6.10.0, 6.9.6 and 6.8.9
CVE-2021-40995US	medium6.3	1.17% (67th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
CVE-2021-40994US	medium6.3	1.17% (67th)	—	no fix	2021-10-15	≤ ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1

showing 50 of 83

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')25 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')11 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')10 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-287Improper Authentication7 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)83 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan