ClearPass Policy Manager Vulnerability Could Lead to Stored XSS Attacks
CVE-2024-26299
What is CVE-2024-26299?
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Aruba ClearPass Policy Manager ClearPass Policy Manager 6.12.x: 6.12.0
Aruba ClearPass Policy Manager ClearPass Policy Manager 6.12.x: 6.12.0
Aruba ClearPass Policy Manager ClearPass Policy Manager 6.11.x: 6.11.6 and below
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved