Vulnerability Database

318,638

Total vulnerabilities in the database

CVE-2020-7111

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.

  • Published: Apr 16, 2020
  • Updated: Nov 9, 2025
  • CVE: CVE-2020-7111
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
arubanetworks / clearpass 6.7.0 6.7.13
arubanetworks / clearpass 6.8.0 6.8.4