CVE-2025-25039 - Aruba Networking ClearPass Policy Manager Command Injection Vulnerability
CVE ID : CVE-2025-25039 Published : Feb. 4, 2025, 7:15 p.m. | 59 minutes ago Description : A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system. Severity: 4.7 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...
![CVE-2025-25039 - Aruba Networking ClearPass Policy Manager Command Injection Vulnerability](https://cdn.cvefeed.io/images/cvefeed.io-new.webp)
Published : Feb. 4, 2025, 7:15 p.m. | 59 minutes ago
Description : A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.
Severity: 4.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...