# Arubanetworks Clearpass Policy Manager


- [CVE-2017-5638](https://insights.sbomify.com/CVE-2017-5638/): Apache Struts Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-23657](https://insights.sbomify.com/CVE-2022-23657/): Auth bypass in Aruba ClearPass Policy Manager (critical 10.0)
- [CVE-2022-23658](https://insights.sbomify.com/CVE-2022-23658/): Auth bypass in Aruba ClearPass Policy Manager (critical 10.0)
- [CVE-2022-23660](https://insights.sbomify.com/CVE-2022-23660/): Auth bypass in Aruba ClearPass Policy Manager (critical 10.0)
- [CVE-2023-25589](https://insights.sbomify.com/CVE-2023-25589/): Unauthenticated Arbitrary User Creation Leads to Complete System Compromise (critical 9.8)
- [CVE-2021-37736](https://insights.sbomify.com/CVE-2021-37736/): Auth bypass in Aruba ClearPass Policy Manager (critical 9.8)
- [CVE-2021-40996](https://insights.sbomify.com/CVE-2021-40996/): Auth bypass in Aruba ClearPass Policy Manager (critical 9.8)
- [CVE-2021-40997](https://insights.sbomify.com/CVE-2021-40997/): Auth bypass in Aruba ClearPass Policy Manager (critical 9.8)
- [CVE-2020-7115](https://insights.sbomify.com/CVE-2020-7115/): Auth bypass in ClearPass Policy Manager (critical 9.8)
- [CVE-2015-4650](https://insights.sbomify.com/CVE-2015-4650/): Privilege escalation in n/a (critical 9.8)
- [CVE-2022-23661](https://insights.sbomify.com/CVE-2022-23661/): Command injection in Aruba ClearPass Policy Manager (critical 9.1)
- [CVE-2022-23662](https://insights.sbomify.com/CVE-2022-23662/): Command injection in Aruba ClearPass Policy Manager (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/arubanetworks/clearpass-policy-manager/