Critical severity9.8NVD Advisory· Published Apr 29, 2021· Updated Jun 17, 2026

CVE-2021-29145

Description

A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.

Affected products

Arubanetworks/Clearpass
cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*
Range: >=6.7.0,<6.7.14
Aruba/ClearPass Policy Managerdescription
Arubanetworks/ClearPass Policy Managerllm-create
Range: <6.9.5, <6.8.9, <6.7.14-HF1

Patches

Vulnerability mechanics

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txtnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000