What is CVE-2025-23059?

CVE-2025-23059 is a medium-severity vulnerability in Arubanetworks Clearpass Policy Manager, classified under Path Traversal. CVSS score: 6.8/10. Published 2025-02-04.

How severe is CVE-2025-23059?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Path Traversal in Arubanetworks Clearpass Policy Manager

CVE-2025-23059

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive data, potentially compromising the integrity and security of the entire system.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (44.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N.

Affected products

Arubanetworks Clearpass_policy_manager
Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Clearpass Policy Manager — versions 6.12.0, 6.11.0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security-alert@hpe.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-23059?: CVE-2025-23059 is a medium-severity vulnerability in Arubanetworks Clearpass Policy Manager, classified under Path Traversal. CVSS score: 6.8/10. Published 2025-02-04.
How severe is CVE-2025-23059?: Medium severity. CVSS v3 base score is 6.8 out of 10.