CVE-2017-5824: HP Aruba Clearpass Policy Manager

Critical severity, CVSS 9.8. EPSS: 19.3% chance of exploitation in the next 30 days.

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

Affected products

• HP Aruba Clearpass Policy Manager: from 6.6.0, before 6.6.5 (fixed in 6.6.5)

Published 2018-02-15. Last modified 2026-06-17.