Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2014-8367

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: Nov 25, 2014
Updated: Nov 9, 2025
CVE: CVE-2014-8367
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
arubanetworks / clearpass_policy_manager	6.2	6.2.x
arubanetworks / clearpass_policy_manager	6.2.0	6.2.6.x
arubanetworks / clearpass_policy_manager	6.3.0	6.3.6
arubanetworks / clearpass_policy_manager	6.4.0	6.4.2

http://secunia.com/advisories/62602
http://www.arubanetworks.com/support/alerts/aid-11192014.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/98870

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo