Medium4.7HPE Aruba Networking

ClearPass Policy Manager: vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows…

CVE-2025-25039 Published Feb 4, 2025Updated by vendor Jun 17, 2026

CVE-2025-25039

Affected products & platforms

HPE Aruba NetworkingClearPassClearPass Policy Manager

Summary

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · medium-confidence parse· fetched 2 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

HPE Aruba Networking Security Advisories (PSIRT) via NVDofficial
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
HPE Aruba Networking

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2025-25039NVD CVE.org MITRE

Official resources

Aruba ClearPass Policy Manager upgrade guide
Official documentation
Official upgrade documentation for Aruba ClearPass Policy Manager.
HPE Aruba Networking Security Advisories (PSIRT)
Official documentation
Official Aruba PSIRT bulletins — the canonical affected/fixed version table for this CVE.
HPE Networking Support Portal (software downloads)
Official documentation
Official download location for the fixed ArubaOS / AOS-CX / ClearPass / Instant builds.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.