CVE-2024-26300: XSS
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26300?
CVE-2024-26300 is considered a medium severity vulnerability due to its potential for exploitation through stored cross-site scripting.
How do I fix CVE-2024-26300?
To fix CVE-2024-26300, apply the latest patches from Aruba Networks for affected versions of ClearPass Policy Manager.
Who is affected by CVE-2024-26300?
CVE-2024-26300 affects authenticated users of ClearPass Policy Manager versions 6.9.0 through 6.9.13, 6.10.0 through 6.10.8, and 6.11.0 through 6.11.6.
What type of attack can be executed through CVE-2024-26300?
CVE-2024-26300 can be exploited to conduct a stored cross-site scripting (XSS) attack against administrative users.
What is the impact of CVE-2024-26300?
The impact of CVE-2024-26300 includes the potential execution of arbitrary script code in the context of an administrative user.