CVE-2020-7123: arubanetworks clearpass_policy_manager
Vulnerability summary
CVE-2020-7123 is a high (CVSS 7.8) vulnerability in arubanetworks clearpass_policy_manager. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.1% of scored vulnerabilities.
Timeline
- 28-04-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.25% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Arubanetworks1 product
- clearpass_policy_manager≥ 6.7.0, < 6.7.12 | ≥ 6.8.0, < 6.8.5
1 vendor · 1 product