CVE-2021-26682: XSS
A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the portal. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the guest portal interface.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-26682?
CVE-2021-26682 is a remote reflected cross-site scripting (XSS) vulnerability discovered in Aruba ClearPass Policy Manager.
What versions of Aruba ClearPass Policy Manager are affected by CVE-2021-26682?
Versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 of Aruba ClearPass Policy Manager are affected by CVE-2021-26682.
How severe is CVE-2021-26682?
CVE-2021-26682 has a severity score of 6.1, which is classified as medium severity.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-26682?
CVE-2021-26682 is associated with CWE ID 79.
How can I fix the CVE-2021-26682 vulnerability in Aruba ClearPass Policy Manager?
To fix the CVE-2021-26682 vulnerability in Aruba ClearPass Policy Manager, it is recommended to update to version 6.9.5, 6.8.8-HF1, or 6.7.14-HF1 of the software.