CVE-2015-1389: XSS
Published May 28, 2015
·Updated
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action.
Affected Software
1 affected component
Arubanetworks Clearpass Policy Manager<=6.4.4
Event History
May 28, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1389?
CVE-2015-1389 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2015-1389?
To fix CVE-2015-1389, upgrade Aruba ClearPass Policy Manager to version 6.4.5 or later.
3
What type of vulnerability is CVE-2015-1389?
CVE-2015-1389 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
4
Who is affected by CVE-2015-1389?
CVE-2015-1389 affects users of Aruba Networks ClearPass Policy Manager versions prior to 6.4.5.
5
What can attackers do with CVE-2015-1389?
Attackers can exploit CVE-2015-1389 to execute arbitrary web scripts or HTML in the context of the user's session.