← Database

CVE-2025-25039

MEDIUM CVSS: 4.7 Published: 2025-02-04 Modified: 2026-06-17

Description

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.

Affected Platforms

Arubanetworks Clearpass Policy Manager

Weakness Type

CWE-78

References