中文

// CVE · PUBLISHED 2026-10-06

CVE-2026-79794

Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)

9.1 · CVSS 3.1Critical

Description

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

References

Related CVEs

  • CVE-2026-79805Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8
  • CVE-2026-79801Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8
  • CVE-2026-79798Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.9
  • CVE-2026-79796Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8
  • CVE-2026-76754Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8
  • CVE-2026-76753Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8
  • CVE-2026-76752Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8
  • CVE-2026-76751Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)CVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.