Clearpass Policy Manager (Cppm)
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):clearpass_policy_manager_(cppm):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Clearpass Policy Manager (Cppm) (bdfdc657-23fd-5fdc-9e9f-c1bed7df09cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-73786 |
vulnerable | 2026-09-16 04:33:10.048476 |
Unauthenticated Network-Based Denial of Service in CPPM systems
HIGH (7.5)
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.
Published: 2026-09-09T19:13:31.042Z
Updated: 2026-09-10T14:52:31.040Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73787 |
vulnerable | 2026-09-16 04:33:09.949279 |
Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface
HIGH (7.2)
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Published: 2026-09-09T19:14:18.443Z
Updated: 2026-09-11T03:56:31.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73789 |
vulnerable | 2026-09-16 04:33:09.659628 |
Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface
MEDIUM (5.3)
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.
Published: 2026-09-09T19:15:21.899Z
Updated: 2026-09-10T14:01:43.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73788 |
vulnerable | 2026-09-16 04:33:09.585065 |
Privilege Escalation in ClearPass OnGuard Agent
MEDIUM (6.5)
A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system.
Published: 2026-09-09T19:14:37.359Z
Updated: 2026-09-10T14:02:25.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73769 |
vulnerable | 2026-09-16 04:33:09.518773 |
Authenticated Remote Code Execution in CPPM Web Interface
HIGH (7.2)
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Published: 2026-09-09T19:13:20.453Z
Updated: 2026-09-11T03:56:32.855Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5486 |
vulnerable | 2026-06-08 06:56:16.155290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41916 |
vulnerable | 2026-06-08 06:43:55.456437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41915 |
vulnerable | 2026-06-08 06:43:55.455137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.