Vulnerability Database

318,638

Total vulnerabilities in the database

CVE-2015-3655

Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token.

  • Published: Aug 29, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-3655
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
arubanetworks / clearpass 6.5.0 6.5.2
arubanetworks / clearpass 6.4.0 6.4.7