Internal security research (HPE Networking).

Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S

Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S

Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent

Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager

Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager

Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software

Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface

Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S