Description
A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting (XSS) attack. Successful exploitation could allow an attacker to execute arbitrary JavaScript code in a victim's browser in the context of the affected interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking ClearPass Policy Manager | 6.12.0 – ≤ 6.12.5, 6.11.0 – ≤ 6.11.12 | — |
Advisories 1
- WID-SEC-2025-2084 Aruba ClearPass Policy Manager: Schwachstelle ermöglicht Cross Site Scripting BSI CERT-Bund (WID) · Sep 17, 2025