Aruba ClearPass Policy Manager

Name: Aruba ClearPass Policy Manager
Brand: Aruba

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

1critical6high5medium0low

updated 2026-10-28

vulnerabilities (47)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-73786US	—	0.57% (47th)	Exploit	6.11.15	2026-09-09	3 versions
CVE-2020-7111US	high7.2	1.89% (79th)	—	6.7.13	2020-04-16	2 versions
CVE-2026-79802US	—	1.19% (68th)	—	6.11.16	2026-10-06	2 versions
CVE-2020-7114US	critical9.8OT elevated	1.09% (65th)	—	6.7.13	2020-04-16	2 versions
CVE-2026-73769US	—	1.06% (64th)	—	6.11.15	2026-09-09	3 versions
CVE-2020-7113US	medium4.9	0.85% (58th)	—	6.7.13	2020-04-16	2 versions
CVE-2026-73787US	—	0.84% (58th)	—	6.11.15	2026-09-09	3 versions
CVE-2026-79803US	—	0.80% (56th)	—	6.11.16	2026-10-06	2 versions
CVE-2024-51771US	high8.8	0.76% (55th)	—	6.11.9	2024-12-03	2 versions
CVE-2025-23058US	high8.1	0.72% (54th)	—	6.11.10	2025-02-04	2 versions
CVE-2025-25039US	high8.8	0.65% (51st)	—	6.11.10	2025-02-04	2 versions
CVE-2026-79815US	—	0.64% (50th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79800US	—	0.63% (50th)	—	6.11.16	2026-10-06	2 versions
CVE-2020-7110US	medium4.8	0.62% (49th)	—	6.7.13	2020-04-16	2 versions
CVE-2025-23059US	medium4.9	0.60% (48th)	—	6.11.10	2025-02-04	2 versions
CVE-2026-79810US	—	0.56% (46th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-76750US	—	0.54% (45th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-76753US	—	0.53% (44th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-76752US	—	0.47% (41st)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79796US	—	0.47% (40th)	—	6.11.16	2026-10-06	2 versions
CVE-2024-51772US	high8.0	0.46% (40th)	—	6.11.9	2024-12-03	2 versions
CVE-2026-79805US	—	0.43% (37th)	—	6.11.16	2026-10-06	2 versions
CVE-2024-53672US	medium6.3	0.41% (35th)	—	6.11.9	2024-12-03	2 versions
CVE-2026-73789US	—	0.40% (34th)	—	6.11.15	2026-09-09	3 versions
CVE-2026-76754US	—	0.39% (32nd)	—	6.11.16	2026-10-06	2 versions
CVE-2026-73788US	—	0.36% (30th)	—	6.11.15	2026-09-09	3 versions
CVE-2026-79798US	—	0.34% (28th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79799US	—	0.33% (26th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79801US	—	0.32% (25th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79809US	—	0.31% (24th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-76751US	—	0.30% (23rd)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79811US	—	0.30% (22nd)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79794US	—	0.30% (22nd)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79818US	—OT elevated	0.29% (21st)	—	6.11.16	2026-10-06	2 versions
CVE-2024-51773US	medium5.4	0.27% (20th)	—	6.12.2	2024-12-03	2 versions
CVE-2026-79797US	—	0.27% (19th)	—	6.11.16	2026-10-06	2 versions
CVE-2025-37122US	—	0.25% (17th)	—	6.11.12 HF CVE-2025-37122	2025-09-17	2 versions
CVE-2025-23060US	high8.1OT elevated	0.23% (14th)	—	6.11.10	2025-02-04	2 versions
CVE-2026-79816US	—	0.19% (9th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-23599US	—	0.16% (5th)	—	6.11.13 Hotfix Patch for CVE-2026-23599	2026-02-18	2 versions
CVE-2026-79808US	—	0.12% (2nd)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79817US	—	0.10% (1st)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79806US	—	0.10% (1st)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79814US	—	0.10% (1st)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79812US	—	0.09% (1st)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79813US	—	0.08% (0th)	—	6.11.16	2026-10-06	2 versions
CVE-2026-79807US	—	0.08% (0th)	—	6.11.16	2026-10-06	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)47 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan