Hewlett Packard Enterprise (Hpe) Clearpass Policy Manager (Cppm) vulnerabilities

36 vulnerabilities

Known vulnerabilities in Hewlett Packard Enterprise (Hpe) Clearpass Policy Manager (Cppm), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2024-41916arubanetworksclearpass_policy_manager+1
EPSS score
0.36%
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.8.8CVE-2024-41915arubanetworksclearpass_policy_manager+1
EPSS score
0.55%
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster.5.8CVE-2024-5486arubanetworksclearpass_policy_manager+1
EPSS score
0.34%
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager5.3CVE-2026-73789hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.40%
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.6.5CVE-2026-73788hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.36%
A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system.7.5CVE-2026-73786hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.57%
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.7.2CVE-2026-73769hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
1.06%
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.7.2CVE-2026-73787hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.84%
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.9.8CVE-2026-76753hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.53%
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.9.8CVE-2026-76754hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.38%
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.9.8CVE-2026-76751hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.30%
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.9.8CVE-2026-76750hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.54%
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.9.8CVE-2026-76752hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.47%
Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system.9.8CVE-2026-79801hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.32%
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.6.7CVE-2026-79814hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.09%
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute arbitrary code with elevated privileges on the affected system.6.1CVE-2026-79812hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.09%
A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service.8.8CVE-2026-79803hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.80%
A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.9.8CVE-2026-79796hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.46%
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.8.8CVE-2026-79802hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
1.19%
A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host.9.1CVE-2026-79794hewlett packard enterprise (hpe)clearpass policy manager (cppm)
EPSS score
0.30%
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.