9.9
Critique
CVE-2026-79798 SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a…
Description
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ClearPass Policy Manager (CPPM) | 6.14.0 | Pas de correctif indiqué |
| ClearPass Policy Manager (CPPM) 6.11 | 6.11.0 → 6.11.15 | Pas de correctif indiqué |
Autres CVE de ClearPass Policy Manager (CPPM)
Les 36 CVE de ClearPass Policy Manager (CPPM) →
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…
5.3
Moyenne
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy…
5.5
Moyenne
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote…
5.4
Moyenne
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote…
6.5
Moyenne