# Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM).

Every CVE that names Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79818.md)
  `CVE-2026-79818` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software](https://agentprime.io/advisories/CVE-2026-79817.md)
  `CVE-2026-79817` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface](https://agentprime.io/advisories/CVE-2026-79816.md)
  `CVE-2026-79816` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent](https://agentprime.io/advisories/CVE-2026-79815.md)
  `CVE-2026-79815` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent](https://agentprime.io/advisories/CVE-2026-79814.md)
  `CVE-2026-79814` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal
- [Local Privilege Escalation in ClearPass Client Software](https://agentprime.io/advisories/CVE-2026-79813.md)
  `CVE-2026-79813` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79812.md)
  `CVE-2026-79812` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.1 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API](https://agentprime.io/advisories/CVE-2026-79811.md)
  `CVE-2026-79811` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79810.md)
  `CVE-2026-79810` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection
- [Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass](https://agentprime.io/advisories/CVE-2026-79809.md)
  `CVE-2026-79809` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal
- [Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent](https://agentprime.io/advisories/CVE-2026-79808.md)
  `CVE-2026-79808` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software](https://agentprime.io/advisories/CVE-2026-79807.md)
  `CVE-2026-79807` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Weak cryptography or TLS
- [Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent](https://agentprime.io/advisories/CVE-2026-79806.md)
  `CVE-2026-79806` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79805.md)
  `CVE-2026-79805` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal
- [Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API](https://agentprime.io/advisories/CVE-2026-79803.md)
  `CVE-2026-79803` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Command Injection Vulnerability in the ClearPass Policy Manager Client Software](https://agentprime.io/advisories/CVE-2026-79802.md)
  `CVE-2026-79802` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent](https://agentprime.io/advisories/CVE-2026-79801.md)
  `CVE-2026-79801` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-353
- [Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79800.md)
  `CVE-2026-79800` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal
- [Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-79799.md)
  `CVE-2026-79799` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-79798.md)
  `CVE-2026-79798` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [Improper Access Control in HPE Networking ClearPass Android Client Application](https://agentprime.io/advisories/CVE-2026-79797.md)
  `CVE-2026-79797` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Authentication Bypass Vulnerabilities in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-79796.md)
  `CVE-2026-79796` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface](https://agentprime.io/advisories/CVE-2026-79794.md)
  `CVE-2026-79794` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-76754.md)
  `CVE-2026-76754` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-76753.md)
  `CVE-2026-76753` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access](https://agentprime.io/advisories/CVE-2026-76752.md)
  `CVE-2026-76752` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2026-76751.md)
  `CVE-2026-76751` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-353
- [Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-76750.md)
  `CVE-2026-76750` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Insecure deserialization
- [Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface](https://agentprime.io/advisories/CVE-2026-73789.md)
  `CVE-2026-73789` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Privilege Escalation in ClearPass OnGuard Agent](https://agentprime.io/advisories/CVE-2026-73788.md)
  `CVE-2026-73788` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface](https://agentprime.io/advisories/CVE-2026-73787.md)
  `CVE-2026-73787` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Unauthenticated Network-Based Denial of Service in CPPM systems](https://agentprime.io/advisories/CVE-2026-73786.md)
  `CVE-2026-73786` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Authenticated Remote Code Execution in CPPM Web Interface](https://agentprime.io/advisories/CVE-2026-73769.md)
  `CVE-2026-73769` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection
- [Authenticated Sensitive Information Disclosure in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2024-41916.md)
  `CVE-2024-41916` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.8 Medium · Not analysed yet · Published 30 Jul 2024
- [Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface](https://agentprime.io/advisories/CVE-2024-41915.md)
  `CVE-2024-41915` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 7.2 High · Not analysed yet · Published 30 Jul 2024 · Tags: SQL injection
- [Authenticated Sensitive Information Disclosure in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2024-5486.md)
  `CVE-2024-5486` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 5.8 Medium · Not analysed yet · Published 30 Jul 2024

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=hewlett-packard-enterprise-hpe-clearpass-policy-manager-cppm>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/hewlett-packard-enterprise-hpe-clearpass-policy-manager-cppm/>. Everything for agents: <https://agentprime.io/llms.txt>.