CVE-2026-79799

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Medium priority: severe, but no known exploitation

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

In the news

• Múltiples vulnerabilidades en productos de HPE · INCIBE-CERT