CVE-2022-43532: XSS
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43532?
CVE-2022-43532 is a vulnerability in the web-based management interface of ClearPass Policy Manager that allows an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user.
How does CVE-2022-43532 affect ClearPass Policy Manager?
CVE-2022-43532 affects versions of ClearPass Policy Manager between 6.9.0 and 6.9.12, as well as versions between 6.10.0 and 6.10.7.
What is the severity of CVE-2022-43532?
CVE-2022-43532 has a severity rating of 4.8 (High).
How can an attacker exploit CVE-2022-43532?
An attacker can exploit CVE-2022-43532 by executing arbitrary script code through a stored cross-site scripting (XSS) attack on an administrative user of the ClearPass Policy Manager interface.
Is there a fix available for CVE-2022-43532?
Yes, users of affected versions should update ClearPass Policy Manager to a version that is not vulnerable or apply the necessary patches provided by Arubanetworks.