Authenticated script execution via stored management input

Stored XSS in HPE Aruba Networking ClearPass Policy Manager allows remote authenticated users to run scripts in an administrator's browser. The web administration interface stores attacker-supplied content without sufficient neutralization and later renders it as executable script, although HPE has not disclosed the affected input or handler. Exploitation requires high-privilege access and an administrative user to view the stored content; execution remains confined to the affected interface's browser context.