Advisories · Technology

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM).

Every CVE that names Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-79818 CVE record

CVSS 5.3 Medium

Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Authentication bypass
Not analysed yet 6 Oct 2026
CVE-2026-79817 CVE record

CVSS 5.5 Medium

Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-79816 CVE record

CVSS 5.4 Medium

Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2026
CVE-2026-79815 CVE record

CVSS 6.5 Medium

Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Command injection
Not analysed yet 6 Oct 2026
CVE-2026-79814 CVE record

CVSS 6.7 Medium

Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-79813 CVE record

CVSS 6.7 Medium

Local Privilege Escalation in ClearPass Client Software
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-79812 CVE record

CVSS 6.1 Medium

Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Denial of service
Not analysed yet 6 Oct 2026
CVE-2026-79811 CVE record

CVSS 7.2 High

Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2026-79810 CVE record

CVSS 7.2 High

Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-79809 CVE record

CVSS 7.3 High

Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-79808 CVE record

CVSS 7.8 High

Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-79807 CVE record

CVSS 7.8 High

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Weak cryptography or TLS
Not analysed yet 6 Oct 2026
CVE-2026-79806 CVE record

CVSS 7.8 High

Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-79805 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-79803 CVE record

CVSS 8.8 High

Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Command injection
Not analysed yet 6 Oct 2026
CVE-2026-79802 CVE record

CVSS 8.8 High

Command Injection Vulnerability in the ClearPass Policy Manager Client Software
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Command injection
Not analysed yet 6 Oct 2026
CVE-2026-79801 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- CWE-353
Not analysed yet 6 Oct 2026
CVE-2026-79800 CVE record

CVSS 8.8 High

Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-79799 CVE record

CVSS 8.8 High

Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2026
CVE-2026-79798 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2026-79797 CVE record

CVSS 8.8 High

Improper Access Control in HPE Networking ClearPass Android Client Application
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-79796 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Authentication Bypass Vulnerabilities in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Authentication bypass
Not analysed yet 6 Oct 2026
CVE-2026-79794 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2026-76754 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Command injection
Not analysed yet 6 Oct 2026
CVE-2026-76753 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-76752 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Authentication bypass
Not analysed yet 6 Oct 2026
CVE-2026-76751 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- CWE-353
Not analysed yet 6 Oct 2026
CVE-2026-76750 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Insecure deserialization
Not analysed yet 6 Oct 2026
CVE-2026-73789 CVE record

CVSS 5.3 Medium

Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Broken access control
Not analysed yet 9 Sept 2026
CVE-2026-73788 CVE record

CVSS 6.5 Medium

Privilege Escalation in ClearPass OnGuard Agent
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Privilege escalation
Not analysed yet 9 Sept 2026
CVE-2026-73787 CVE record

CVSS 7.2 High

Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Command injection
Not analysed yet 9 Sept 2026
CVE-2026-73786 CVE record

CVSS 7.5 High

Unauthenticated Network-Based Denial of Service in CPPM systems
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Denial of service
Not analysed yet 9 Sept 2026
CVE-2026-73769 CVE record

CVSS 7.2 High

Authenticated Remote Code Execution in CPPM Web Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- Command injection
Not analysed yet 9 Sept 2026
CVE-2024-41916 CVE record

CVSS 6.8 Medium

Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Not analysed yet 30 Jul 2024
CVE-2024-41915 CVE record

CVSS 7.2 High

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
- SQL injection
Not analysed yet 30 Jul 2024
CVE-2024-5486 CVE record

CVSS 5.8 Medium

Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Not analysed yet 30 Jul 2024