Hewlett Packard Enterprise (HPE) Clearpass Policy Manager (Cppm)
8 CVEs affecting Hewlett Packard Enterprise (HPE) Clearpass Policy Manager (Cppm). Latest disclosed: 2026-09-09. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73786 | High | 7.5 | 2026-09-09 | A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Succe… |
CVE-2026-73787 | High | 7.2 | 2026-09-09 | A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful explo… |
CVE-2026-73769 | High | 7.2 | 2026-09-09 | A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution… |
CVE-2024-41915 | High | 7.2 | 2024-07-30 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2024-41916 | Medium | 6.8 | 2024-07-30 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext fo… |
CVE-2026-73788 | Medium | 6.5 | 2026-09-09 | A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard d… |
CVE-2024-5486 | Medium | 5.8 | 2024-07-30 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext fo… |
CVE-2026-73789 | Medium | 5.3 | 2026-09-09 | A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate ac… |