CVE-2014-6626: Arubanetworks Clearpass

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors.

Affected products

• Arubanetworks Clearpass: up to and including 6.3.4; version 6.4.0 only

Published 2014-11-19. Last modified 2026-06-17.