Login Request a demo
CP
Product
ClearPass Policy Manager (CPPM)
by Hewlett Packard Enterprise (HPE) · last CVE Oct 6, 2026
33
CVEs
0
On KEV
9.9
Max CVSS
28
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 10High 14Medium 9Low 0
Severity
All severities33Critical10High14Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ClearPass Policy Manager (CPPM) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-79803
8.8
1%
Oct 6
Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79802
8.8
1%
Oct 6
Command Injection Vulnerability in the ClearPass Policy Manager Client Software
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79800
8.8
1%
Oct 6
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0
CVE-2026-79799
8.8
0%
Oct 6
Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79797
8.8
0%
Oct 6
Improper Access Control in HPE Networking ClearPass Android Client Application
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79808
7.8
0%
Oct 6
Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79807
7.8
0%
Oct 6
Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79806
7.8
0%
Oct 6
Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-73786
7.5
1%
Sep 9
Unauthenticated Network-Based Denial of Service in CPPM systems
Affected: 6.11.0 through 6.11.14
CVE-2026-79809
7.3
0%
Oct 6
Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79811
7.2
0%
Oct 6
Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-79810
7.2
1%
Oct 6
Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager
Affected: 6.14.0 through 6.14.0; 6.11.0 through 6.11.15
CVE-2026-73787
7.2
1%
Sep 9
Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface
Affected: 6.11.0 through 6.11.14
CVE-2026-73769
7.2
1%
Sep 9
Authenticated Remote Code Execution in CPPM Web Interface
Affected: 6.12.0 through 6.12.8; 6.11.0 through 6.11.14
Showing 14