HP Inc. Poly Clariti Manager vulnerabilities
14 vulnerabilities
Known vulnerabilities in HP Inc. Poly Clariti Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-43485hp inc.poly clariti manager+1
EPSS score0.20%
A potential security
vulnerability has been identified in the Poly Clariti Manager for versions
prior to 10.12.2. The vulnerability could potentially allow a privileged
user to retrieve credentials from the log files. HP has addressed the issue in
the latest software update.CVE-2025-43489hp inc.poly clariti manager+1EPSS score0.28%
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validation. HP has addressed the issue in the latest software update.CVE-2025-43487hp inc.poly clariti manager+1EPSS score0.25%
A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly implement access controls. HP has addressed the issue in the latest software update.CVE-2025-43486hp inc.poly clariti manager+1EPSS score0.21%
A potential stored cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website allows user input to be stored and rendered without proper
sanitization. HP has addressed the issue in the latest software update.CVE-2025-43020hp inc.poly clariti manager+1EPSS score0.29%
A potential command
injection vulnerability has been identified in the Poly Clariti Manager for
versions prior to 10.12.2. The vulnerability could allow a privileged user
to submit arbitrary input. HP has addressed the issue in the latest software update.CVE-2025-43484hp inc.poly clariti manager+1EPSS score0.21%
A potential reflected cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website does not validate or sanitize the user input before rendering it in the
response. HP has addressed the issue in the latest software update.CVE-2025-43488hp inc.poly clariti manager+1EPSS score0.22%
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS filter by submitting untrusted characters. HP has addressed the issue in the latest software update.CVE-2025-43483hp inc.poly clariti manager+1EPSS score0.17%
A potential security vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
vulnerability could allow the retrieval of hardcoded cryptographic keys. HP has
addressed the issue in the latest software update.CVE-2025-43021hp inc.poly clariti manager+1EPSS score0.17%
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update.CVE-2025-43022hp inc.poly clariti manager+1EPSS score0.36%
A potential SQL injection vulnerability has been identified in the Poly
Clariti Manager for versions prior to 10.12.1. The vulnerability could allow
a privileged user to execute SQL commands. HP has addressed the issue in
the latest software update.CVE-2024-41913hp inc.poly clariti manager+1EPSS score0.52%
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input.CVE-2024-41912hp inc.poly clariti manager+1EPSS score0.51%
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls.CVE-2024-41911hp inc.poly clariti manager+1EPSS score0.26%
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation.CVE-2024-41910hp inc.poly clariti manager+1EPSS score0.28%
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used.