CVE-2026-79798

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Medium priority: severe, but no known exploitation

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

In the news

• Múltiples vulnerabilidades en productos de HPE · INCIBE-CERT