CVE-2024-51771: Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface
7.2
CVSS
Description
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating system.
Classification
CVE ID: CVE-2024-51771
CVSS Base Severity: HIGH
CVSS Base Score: 7.2
Affected Products
Vendor: Hewlett Packard Enterprise (HPE)
Product: HPE Aruba Networking ClearPass Policy Manager
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)