Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
36 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-79818 | 6.14.0 ; 6.11.0 – 6.11.15 | Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-79817 | 6.14.0 ; 6.11.0 – 6.11.15 | Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-79816 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-79815 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-79814 | 6.14.0 ; 6.11.0 – 6.11.15 | Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-79813 | 6.14.0 ; 6.11.0 – 6.11.15 | Local Privilege Escalation in ClearPass Client Software | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-79812 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-79811 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API | HIGH 7.2 | 0.3 % | ||
| CVE-2026-79810 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager | HIGH 7.2 | 0.6 % | ||
| CVE-2026-79809 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass | HIGH 7.3 | 0.3 % | ||
| CVE-2026-79808 | 6.14.0 ; 6.11.0 – 6.11.15 | Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent | HIGH 7.8 | 0.1 % | ||
| CVE-2026-79807 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Wind… | HIGH 7.8 | 0.1 % | ||
| CVE-2026-79806 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent | HIGH 7.8 | 0.1 % | ||
| CVE-2026-79805 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-79803 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API | HIGH 8.8 | 0.8 % | ||
| CVE-2026-79802 | 6.14.0 ; 6.11.0 – 6.11.15 | Command Injection Vulnerability in the ClearPass Policy Manager Client Software | HIGH 8.8 | 1.2 % | ||
| CVE-2026-79801 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-79800 | 6.14.0 | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager | HIGH 8.8 | 0.6 % | ||
| CVE-2026-79799 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface | HIGH 8.8 | 0.3 % | ||
| CVE-2026-79798 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface | CRITICAL 9.9 | 0.3 % | ||
| CVE-2026-79797 | 6.14.0 ; 6.11.0 – 6.11.15 | Improper Access Control in HPE Networking ClearPass Android Client Application | HIGH 8.8 | 0.3 % | ||
| CVE-2026-79796 | 6.14.0 ; 6.11.0 – 6.11.15 | Authentication Bypass Vulnerabilities in ClearPass Policy Manager | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-79794 | 6.14.0 ; 6.11.0 – 6.11.15 | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-76754 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-76753 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76752 | 6.14.0 ; 6.11.0 – 6.11.15 | Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76751 | 6.14.0 ; 6.11.0 – 6.11.15 | Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-76750 | 6.14.0 ; 6.11.0 – 6.11.15 | Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Ma… | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-73789 | 6.12.0 – 6.12.8 ; 6.11.0 – 6.11.14 | Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-73788 | 6.12.0 – 6.12.8 ; 6.11.0 – 6.11.14 | Privilege Escalation in ClearPass OnGuard Agent | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-73787 | 6.11.0 – 6.11.14 | Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface | HIGH 7.2 | 0.8 % | ||
| CVE-2026-73786 | 6.11.0 – 6.11.14 | Unauthenticated Network-Based Denial of Service in CPPM systems | HIGH 7.5 | 0.6 % | ||
| CVE-2026-73769 | 6.12.0 – 6.12.8 ; 6.11.0 – 6.11.14 | Authenticated Remote Code Execution in CPPM Web Interface | HIGH 7.2 | 1.1 % | ||
| CVE-2024-41916 | ClearPass Policy Manager 6.12.1 and below – <=6.12.1 ; ClearPass Policy Manager 6.11.8 and below – <=6.11.8 | Authenticated Sensitive Information Disclosure in ClearPass Policy Manager | MEDIUM 6.8 | 0.4 % | ||
| CVE-2024-41915 | ClearPass Policy Manager 6.12.1 and below – <=6.12.1 ; ClearPass Policy Manager 6.11.8 and below – <=6.11.8 | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface | HIGH 8.8 | 0.5 % | ||
| CVE-2024-5486 | ClearPass Policy Manager 6.12.1 and below – <=6.12.1 ; ClearPass Policy Manager 6.11.8 and below – <=6.11.8 | Authenticated Sensitive Information Disclosure in ClearPass Policy Manager | MEDIUM 5.8 | 0.3 % |