CVE-2020-7116: Arubanetworks Clearpass Policy Manager

High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days.

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.

Affected products

• Arubanetworks Clearpass Policy Manager: from 6.7.0, up to and including 6.7.13; from 6.8.0, before 6.8.6 (fixed in 6.8.6); from 6.9.0, before 6.9.1 (fixed in 6.9.1)

Published 2020-06-03. Last modified 2026-06-17.