Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code on the underlying operating system. Based on the description, the flaw permits execution of arbitrary commands, essentially giving an attacker full control over the system. The most likely attack path involves establishing an authenticated session to the vulnerable interface and injecting malicious commands, although the specific injection mechanism is not detailed. The impact is the potential compromise of confidentiality, integrity, and availability of the affected system.

The affected product is Hewlett Packard Enterprise ClearPass Policy Manager. The advisory does not list specific version ranges, so any deployed instance that exposes the vulnerable interface may be affected until a vendor‑issued update or mitigation is applied.

The CVSS score of 7.2 indicates high severity. The EPSS score is < 1%, indicating a low probability of exploitation, and the vulnerability is not included in CISA's KEV catalog, suggesting no publicly documented exploits are known. While the exploitation path requires an authenticated session with high privileges, the combination of remote access and privileged credentials limits the attacker’s window relative to unauthenticated vulnerabilities. Nevertheless, the possibility of total system compromise warrants timely assessment and mitigation.