CVE-2026-79794 — Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

CVE-2026-79794

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface PUBLISHED

Description (CNA)

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.14.0 through 6.14.0; affected 6.11.0 through 6.11.15

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.