The vulnerability is a command injection flaw located in the client software of Hewlett Packard Enterprise's ClearPass Policy Manager. When an attacker supplies crafted input, the software can execute arbitrary operating‑system commands with the privileges of the client process, providing full remote code execution capabilities on the host running the client. This can compromise confidentiality, integrity, and availability of the affected system.

The flaw affects Hewlett Packard Enterprise ClearPass Policy Manager client software. No specific version numbers are listed, so all installations of the client are potentially vulnerable until a patch is applied.

With a CVSS base score of 8.8, the vulnerability represents a high‑risk scenario. The EPSS score of 1% indicates a relatively low but non‑zero exploitation probability at the time of assessment, and the issue is not included in the CISA KEV catalog. Based on the description, it is inferred that an attacker who can reach the client service over the network can send malicious input, enabling remote exploitation without requiring local or physical access.