7.2
High
CVE-2026-73787 A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information…
Description
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ClearPass Policy Manager (CPPM) 6.11 | 6.11.0 → 6.11.14 | No fix stated |
Other CVEs of ClearPass Policy Manager (CPPM)
The 36 CVEs of ClearPass Policy Manager (CPPM) →
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…
5.3
Medium
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy…
5.5
Medium
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote…
6.5
Medium
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote…
5.4
Medium