8.8
High
CVE-2026-79799 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated…
Description
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ClearPass Policy Manager (CPPM) | 6.14.0 | No fix stated |
| ClearPass Policy Manager (CPPM) 6.11 | 6.11.0 → 6.11.15 | No fix stated |
Other CVEs of ClearPass Policy Manager (CPPM)
The 36 CVEs of ClearPass Policy Manager (CPPM) →
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…
5.3
Medium
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy…
5.5
Medium
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote…
6.5
Medium
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote…
5.4
Medium