CVE-2021-29139: XSS
Published Apr 29, 2021
·Updated
A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
Affected Software
4 affected components
Arubanetworks Clearpass>=6.7.0<6.7.14
Arubanetworks Clearpass>=6.8.0<6.8.9
Arubanetworks Clearpass>=6.9.0<6.9.5
Arubanetworks Clearpass=6.7.14
Event History
Apr 29, 2021
CVE Published
via MITRE·01:16 PM
Data Sourced
via MITRE·01:16 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-29139?
The severity of CVE-2021-29139 is medium with a CVSS score of 4.8.
2
Which software versions are affected by CVE-2021-29139?
Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1 are affected by CVE-2021-29139.
3
How can I fix CVE-2021-29139?
Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability. It is recommended to update to the latest patched version.
4
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2021-29139.
5
What is the CWE ID of CVE-2021-29139?
The CWE ID of CVE-2021-29139 is CWE-79 (Cross-Site Scripting).