What’s Vulnerable › Products

Aruba ClearPass Policy Manager vulnerabilities

171 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 43 published in the last 12 months.

Check whether your Aruba ClearPass Policy Manager version is affected

Exploited Aruba ClearPass Policy Manager vulnerabilities

• CVE-2017-5638 — Apache Struts Remote Code Execution Vulnerability

Latest Aruba ClearPass Policy Manager vulnerabilities

• CVE-2026-79818 — Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager (CVSS 5.3)
• CVE-2026-79817 — Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software (CVSS 5.5)
• CVE-2026-79816 — Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface (CVSS 6.3)
• CVE-2026-79815 — Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent (CVSS 6.5)
• CVE-2026-79814 — Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent (CVSS 6.7)
• CVE-2026-79813 — Local Privilege Escalation in ClearPass Client Software (CVSS 6.7)
• CVE-2026-79812 — Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager (CVSS 6.1)
• CVE-2026-79811 — Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API (CVSS 7.2)
• CVE-2026-79810 — Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager (CVSS 7.2)
• CVE-2026-79809 — Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass (CVSS 7.3)
• CVE-2026-79808 — Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent (CVSS 7.8)
• CVE-2026-79807 — Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software (CVSS 7.8)
• CVE-2026-79806 — Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent (CVSS 7.8)
• CVE-2026-79805 — Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager (CVSS 9.8)
• CVE-2026-79803 — Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API (CVSS 8.8)
• CVE-2026-79802 — Command Injection Vulnerability in the ClearPass Policy Manager Client Software (CVSS 8.8)
• CVE-2026-79801 — Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent (CVSS 9.8)
• CVE-2026-79800 — Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager (CVSS 8.8)
• CVE-2026-79799 — Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface (CVSS 8.8)
• CVE-2026-79798 — Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface (CVSS 9.9)
• CVE-2026-79797 — Improper Access Control in HPE Networking ClearPass Android Client Application (CVSS 8.8)
• CVE-2026-79796 — Authentication Bypass Vulnerabilities in ClearPass Policy Manager (CVSS 9.8)
• CVE-2026-79794 — Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface (CVSS 9.1)
• CVE-2026-76754 — Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager (CVSS 9.8)
• CVE-2026-76753 — Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager (CVSS 9.8)