CVE-2026-79798: CVE-2026-79798: SQL enjeksiyonu

Açıklama (NVD)

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Özet bilgiler

CVSS v3.1

9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,34 (yüzdelik 28)

CWE

CWE-89

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• support.hpe.com
• CWE-89