This vulnerability affects the web-based management interface of HPE ClearPass Policy Manager (CPPM) version 6.11.0. An unauthenticated remote attacker can exploit this flaw to conduct a Denial-of-Service attack, causing instability and performance degradation of the CPPM server. The CVSS v3.1 base score is 7.5, reflecting high severity due to network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (no confidentiality or integrity impact). No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation results in denial of service, causing instability and degraded performance of the CPPM server. There is no impact on confidentiality or integrity reported. The vulnerability can be exploited remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting network exposure of the management interface to trusted networks only to reduce risk.