Threat database

CVE-2026-79816 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) that allows an unauthenticated remote attacker to perform a DOM-based cross-site scripting (XSS) attack via a client interface. Exploitation could enable execution of arbitrary script code in the victim's browser within the affected interface. The affected versions are 6.11.0 through 6.11.15 and exactly 6.14.0. No known exploits are reported in the wild. No patch or remediation information is provided in the available data.

CVE-2026-79815 is a command injection vulnerability in the OnGuard agent of Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM). It allows an authenticated remote attacker to inject arbitrary commands, potentially executing them with elevated privileges on the affected Windows endpoint. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS 3.1 base score is 6.5, indicating a medium severity level.

CVE-2026-79814 is an arbitrary file write vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager OnGuard agent. It allows a local user with limited privileges to elevate their privileges by writing arbitrary files if certain conditions outside their control are met. Exploitation could lead to arbitrary code execution with elevated privileges on the affected system. The vulnerability affects specific versions of ClearPass Policy Manager. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-79813 is a local privilege escalation vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) client software. It allows a low-privileged local user to execute commands with elevated privileges if certain external conditions are met. The vulnerability affects specific versions of CPPM client software. The CVSS score is 6.7, indicating a medium severity level. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-79812 is a denial of service vulnerability in the OnGuard agent of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An authenticated local attacker could exploit this flaw to disrupt the normal operation of the agent service. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS v3.1 base score is 6.1, indicating a medium severity impact primarily due to availability disruption.

CVE-2026-79811 is a high-severity SQL injection vulnerability in Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM) API. It allows a remote authenticated attacker with administrative privileges to execute arbitrary database commands. The vulnerability affects specific versions of CPPM including 6.11.0 through 6.11.15 and 6.14.0. No known exploits are reported in the wild, and no patch information is provided in the source data.

CVE-2026-79810 is a high-severity remote code execution vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It affects authenticated users with high privileges, allowing them to execute arbitrary commands on the underlying operating system. The vulnerability impacts versions 6.11.0 through 6.11.15 and version 6.14.0. No patch information is provided in the available data. The CVSS score is 7.2, indicating significant impact on confidentiality, integrity, and availability.

CVE-2026-79809 is a high-severity unauthenticated path traversal vulnerability in an API endpoint of Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM). Exploitation allows a remote attacker without authentication to influence authorization decisions and be assigned unintended roles. The vulnerability affects versions 6.11.0 through 6.11.15 and version 6.14.0. The CVSS 3.1 score is 7.3, indicating a significant risk with network attack vector, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

CVE-2026-79808 is a buffer overflow vulnerability in the OnGuard agent of Hewlett Packard Enterprise's ClearPass Policy Manager (CPPM). An authenticated local user could exploit this flaw to execute arbitrary code with elevated privileges or disrupt the service availability. The vulnerability affects specific versions 6.11.0 through 6.11.15 and version 6.14.0. It has a high severity rating with a CVSS score of 7.8. No information about available patches or exploits in the wild is provided.

CVE-2026-79807 is a vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager Windows client software. It involves missing integrity verification that could allow a local malicious user to elevate privileges and execute code with elevated rights. The vulnerability affects specific versions of the software. The CVSS score is 7.8, indicating high severity.

CVE-2026-79806 is a privilege escalation vulnerability in the Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) OnGuard Linux agent. It allows a malicious user on a Linux instance to escalate their privileges to root. The vulnerability affects specific versions of CPPM Linux agent. The CVSS score is 7.8, indicating high severity. No known exploits are reported in the wild. No patch or remediation details are provided in the input data.

CVE-2026-79805 is a critical authenticated path traversal vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). Exploitation allows an attacker to read and modify certain files on the underlying operating system. The vulnerability affects versions 6.11.0 through 6.11.15 and version 6.14.0. It has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch links or vendor advisories are provided, and no known exploits are reported in the wild.

CVE-2026-79803 is a command injection vulnerability in the API of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An authenticated remote attacker could exploit this flaw to escalate privileges and gain administrative control over the affected system. The vulnerability has a high severity with a CVSS score of 8.8. It affects specific versions of CPPM including 6.11.0 through 6.11.15 and version 6.14.0. No information about available patches or vendor advisories is provided.

CVE-2026-79802 is a command injection vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager client software. An attacker supplying crafted input could execute arbitrary commands with elevated privileges on the affected host. The vulnerability has a high severity with a CVSS score of 8.8. It affects specific versions of ClearPass Policy Manager, including 6.11.0 through 6.11.15 and version 6.14.0. No patch or remediation information is provided in the available data.

CVE-2026-79801 is a critical vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) client agent software. It involves a missing integrity verification that could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation may lead to arbitrary code execution on the affected client system. The vulnerability affects specific versions of CPPM client agent software. No patch information is currently provided.

CVE-2026-79800 is an authenticated path traversal vulnerability in the command line interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) version 6.14.0. A low-privileged authenticated remote attacker could exploit this flaw to execute arbitrary code with elevated privileges on the underlying operating system. The vulnerability has a high severity rating with a CVSS 3.1 score of 8.8. No patch or remediation details are currently provided by the vendor.

CVE-2026-79799 is a high-severity stored cross-site scripting (XSS) vulnerability in the web-based management interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). An unauthenticated remote attacker could exploit this flaw to execute arbitrary script code in the browser of an administrative user. This could lead to full compromise of the administrative interface session and potentially allow control over the affected system.

CVE-2026-79798 is a critical SQL injection vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager's web-based management interface. It allows a low-privileged authenticated remote attacker to execute arbitrary database commands. The vulnerability affects specific versions of ClearPass Policy Manager. The CVSS score is 9.9, indicating a severe impact on confidentiality, integrity, and availability.

CVE-2026-79797 is an improper access control vulnerability in the Android client application for Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM). This flaw allows application functionality to be invoked by untrusted sources. Successful exploitation requires user interaction and could enable an unauthenticated remote attacker to obtain sensitive information from the affected user. The vulnerability affects specific versions of the CPPM Android client.

A critical vulnerability (CVE-2026-79796) exists in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) that allows an unauthenticated remote attacker to bypass authentication controls. Exploiting this flaw could grant unauthorized access to the affected system, impacting confidentiality, integrity, and availability. The vulnerability affects specific versions of CPPM including 6.11.0 through 6.11.15 and version 6.14.0. The CVSS score is 9.8, indicating a high severity risk. No patch or remediation details are provided in the available data.