Login Request a demo
CP
Product
ClearPass Policy Manager (CPPM)
by Hewlett Packard Enterprise (HPE) · last CVE Oct 6, 2026
33
CVEs
0
On KEV
9.9
Max CVSS
28
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 10High 14Medium 9Low 0
Severity
All severities33Critical10High14Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ClearPass Policy Manager (CPPM) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-79798
9.9
0%
Oct 6
Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79805
9.8
0%
Oct 6
Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79801
9.8
0%
Oct 6
Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79796
9.8
0%
Oct 6
Authentication Bypass Vulnerabilities in ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-76754
9.8
0%
Oct 6
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-76753
9.8
1%
Oct 6
Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-76752
9.8
0%
Oct 6
Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-76751
9.8
0%
Oct 6
Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-76750
9.8
1%
Oct 6
Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79794
9.1
0%
Oct 6
Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
Showing 10