HPE Aruba Networking ClearPass Policy Manager vulnerabilities

Product

HPE Aruba Networking ClearPass Policy Manager

by Hewlett Packard Enterprise (HPE) · last CVE Feb 17, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 6Medium 4Low 0

Severity

All severities10 Critical0 High6 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add HPE Aruba Networking ClearPass Policy Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-25039	8.8	1%	Feb 4	Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface Affected: 6.12.0 through <=6.12.3; 6.11.0 through <=6.11.9
CVE-2024-51771	8.8	1%	Dec 3	Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface Affected: 6.12.0 through 6.12.2; 6.11.0 through 6.11.9
CVE-2025-23060	8.1	0%	Feb 4	Sensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM) Affected: 6.12.0 through <=6.12.3; 6.11.0 through <=6.11.9
CVE-2025-23058	8.1	1%	Feb 4	Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface Affected: 6.12.0 through <=6.12.3; 6.11.0 through <=6.11.9
CVE-2024-51772	8.0	0%	Dec 3	Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE) Affected: 6.12.0 through 6.12.2; 6.11.0 through 6.11.9
CVE-2026-23599	7.8	0%	Feb 17	Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux Affected: 6.12.0 through 6.12.7; 6.11.0 through 6.11.13
CVE-2024-53672	6.3	0%	Dec 3	Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface Affected: 6.12.0 through 6.12.2; 6.11.0 through 6.11.9
CVE-2025-37122	6.1	0%	Sep 17	Unauthenticated Reflected Cross-Site Scripting Affected: 6.12.0 through 6.12.5; 6.11.0 through 6.11.12
CVE-2024-51773	5.4	0%	Dec 3	Authenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface Affected: 6.12.0 through 6.12.2; 6.11.0 through 6.11.9
CVE-2025-23059	4.9	1%	Feb 4	Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager Affected: 6.12.0 through <=6.12.3; 6.11.0 through <=6.11.9