A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to…
A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary database commands.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- HPE
- Product
- Aruba / iLO / OneView
- CVSS
- 7.2
- Exposure class
- Network management
Why it ranks 15 (Routine)
- CVSS 7.2 high
- Product class: network management
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-79811 on this site · NVD · CVE.org · Vulnpedia