A flaw in the web‑based management interface of HPE ClearPass Policy Manager permits an unauthenticated remote attacker to trigger a denial‑of‑service condition, causing the server to become unstable and its performance to degrade.

HPE ClearPass Policy Manager. No specific version information is supplied, so all installations should verify whether they are affected and apply any available fixes.

The vulnerability scores a CVSS of 7.5, indicating high severity. An attacker can exploit it over the network without authentication, targeting the management interface. Because the EPSS score is not available and the issue is not listed in CISA’s KEV catalog, the current probability of exploitation is unknown, but the potential impact on availability makes it a concern for environments that rely on uninterrupted policy management services.