Medium severity4.7NVD Advisory· Published Feb 4, 2025· Updated Jun 17, 2026
CVE-2025-25039
CVE-2025-25039
Description
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.
Affected products
3- cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*Range: >=6.11.0,<6.11.10
- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking ClearPass Policy Managerv5Range: 6.12.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.