Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):clearpass_policy_manager_(cppm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductClearpass Policy Manager (Cppm) (bdfdc657-23fd-5fdc-9e9f-c1bed7df09cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5486 vulnerable 2026-06-08 06:56:16.155290 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
MEDIUM (5.8)
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager
Published: 2024-07-30T17:04:24.617Z
Updated: 2024-10-28T19:55:49.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41916 vulnerable 2026-06-08 06:43:55.456437 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
MEDIUM (6.8)
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
Published: 2024-07-30T17:09:40.673Z
Updated: 2024-10-28T20:22:04.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41915 vulnerable 2026-06-08 06:43:55.455137 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
HIGH (7.2)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster.
Published: 2024-07-30T17:07:42.565Z
Updated: 2024-08-02T04:46:52.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.