arubanetworks clearpass
productUScpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
4critical15high17medium0low
updated 2026-10-28
01
vulnerabilities (36)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-29147US | high8.8 | — |
| CVE-2014-5342US | high10.0 | — |
| CVE-2015-3653US | high7.2 | — |
| CVE-2014-6626US | high10.0 | — |
| CVE-2018-0489US | medium6.5 | — |
| CVE-2014-6627US | high9.0 | — |
| CVE-2021-29145US | critical9.8 | — |
| CVE-2020-7111US | high7.2 | — |
| CVE-2015-4649US | high7.2 | — |
| CVE-2015-3654US | high7.2 | — |
| CVE-2021-29140US | high8.2 | — |
| CVE-2014-6625US | high9.0 | — |
| CVE-2016-4401US | critical9.8 | — |
| CVE-2013-2269US | medium5.0 | — |
| CVE-2014-6624US | medium6.8 | — |
| CVE-2014-6622US | medium5.0 | — |
| CVE-2014-6621US | medium5.0 | — |
| CVE-2015-3657US | high7.2 | — |
| CVE-2015-3656US | high7.2 | — |
| CVE-2021-29141US | medium6.5 | — |
| CVE-2021-29138US | medium6.5 | — |
| CVE-2021-29144US | medium6.5 | — |
| CVE-2020-7114US | critical9.8OT elevated | — |
| CVE-2016-2034US | critical9.8 | — |
| CVE-2014-6623US | medium4.3 | — |
| CVE-2014-4031US | medium4.0 | — |
| CVE-2014-6620US | medium4.3 | — |
| CVE-2020-7113US | medium4.9 | — |
| CVE-2015-3655US | high8.8 | — |
| CVE-2020-7110US | medium4.8 | — |
| CVE-2014-2071US | high7.1 | — |
| CVE-2014-4013US | medium4.9 | — |
| CVE-2021-29146US | medium5.4 | — |
| CVE-2021-29139US | medium4.8 | — |
| CVE-2021-29142US | medium4.8 | — |
| CVE-2018-7060US | high8.8 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
- CWE-284Improper Access Control7 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
- CWE-264CWE-2642 CVEs
- CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
- CWE-285Improper Authorization1 CVEs
- CWE-300Channel Accessible by Non-Endpoint1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE36 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan