Reflected Cross-Site Scripting Vulnerability in Poly Clariti Manager by HP
CVE-2025-43484

6MEDIUM

Key Information:

Vendor

HP
Status
Poly Clariti Manager
Vendor
CVE Published:
23 July 2025

What is CVE-2025-43484?

A reflected cross-site scripting vulnerability has been discovered in Poly Clariti Manager, affecting versions prior to 10.12.1. This issue arises due to the lack of validation and sanitization of user input before it is rendered in responses. As a result, malicious actors can exploit this vulnerability to inject arbitrary scripts into web pages viewed by users. HP has addressed this security concern in the latest software update, urging all users to upgrade to the patched version to mitigate potential risks.

Affected Version(s)

Poly Clariti Manager See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_12781425-127814...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

.