CVE-2015-1392: Arubanetworks Clearpass Policy Manager

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Arubanetworks Clearpass Policy Manager: up to and including 6.4.4

Published 2015-05-28. Last modified 2026-06-17.