Stored Cross-Site Scripting Vulnerability in Poly Clariti Manager by HP
CVE-2025-43486

5.7MEDIUM

Key Information:

Vendor

HP
Status
Poly Clariti Manager
Vendor
CVE Published:
23 July 2025

What is CVE-2025-43486?

The Poly Clariti Manager has been identified with a stored cross-site scripting vulnerability impacting versions before 10.12.1. This issue arises from the application's inability to properly sanitize user input before storing and displaying it. As a result, attackers can inject malicious scripts that may be executed in the context of the user’s session, posing potential security risks. HP has resolved this vulnerability in the latest software release, recommending users to update promptly to mitigate any associated threats.

Affected Version(s)

Poly Clariti Manager See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_12781425-127814...

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

.
CVE-2025-43486 : Stored Cross-Site Scripting Vulnerability in Poly Clariti Manager by HP