8.8
Élevée
CVE-2026-79799 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated…
Description
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ClearPass Policy Manager (CPPM) | 6.14.0 | Pas de correctif indiqué |
| ClearPass Policy Manager (CPPM) 6.11 | 6.11.0 → 6.11.15 | Pas de correctif indiqué |
Autres CVE de ClearPass Policy Manager (CPPM)
Les 36 CVE de ClearPass Policy Manager (CPPM) →
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…
5.3
Moyenne
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy…
5.5
Moyenne
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote…
6.5
Moyenne
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote…
5.4
Moyenne