Aruba Products Multiple Vulnerabilities

Release Date: 5 Feb 2025

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Aruba Products. A remote attacker could exploit this vulnerability to trigger sensitive information disclosure, remote code execution and elevation of privilege on the targeted system.

---

Impact

• Remote Code Execution
• Elevation of Privilege
• Information Disclosure

---

System / Technologies affected

• Aruba Networking ClearPass Policy Manager 6.12.x: 6.12.3 and below
• Aruba Networking ClearPass Policy Manager 6.11.x: 6.11.9 and below

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04784en_us&docLocale=en_US

---

Vulnerability Identifier

• CVE-2024-7348
• CVE-2025-23058
• CVE-2025-23059
• CVE-2025-23060
• CVE-2025-25039

---

Source

• Aruba

---

Related Link

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04784en_us&docLocale=en_US