XSS Bypass Vulnerability in Poly Clariti Manager by HP
CVE-2025-43488

2LOW

Key Information:

Vendor

HP
Status
Poly Clariti Manager
Vendor
CVE Published:
23 July 2025

What is CVE-2025-43488?

A potential security vulnerability has been discovered in Poly Clariti Manager that affects versions prior to 10.12.2. This vulnerability allows attackers to bypass the application’s XSS filter through the submission of untrusted characters. This could potentially lead to unauthorized access and exploitation of the affected system. HP has released an update to address this issue, and it is crucial for users to upgrade to the latest version to ensure their systems remain secure.

Affected Version(s)

Poly Clariti Manager See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_12781425-127814...

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

.