Description
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute arbitrary script code in a victim's browser context within the affected client interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.14.0 – ≤ 6.14.0, 6.11.0 – ≤ 6.11.15 | — |
Advisories 1
- WID-SEC-2026-3762 Aruba ClearPass Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026