CVE-2026-79798

9.9 Critique

Publiée le 06/10/2026 à 22:17 · Modifiée le 08/10/2026 à 06:17 · En attente d'analyse NVD · Source : security-alert@hpe.com

Description

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Traduire en français

Produits concernés

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.9 Critique	security-alert@hpe.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-89

Références

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories