CVE-2024-51772

8.0 highEPSS 0.5%

High (8.0) in arubanetworks clearpass policy manager. EPSS 0.5% chance of exploitation in the next 30 days.

An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-12-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

arubanetworks:clearpass_policy_manager

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04761en_us&docLocale=en_US

Check your stack JSON