← back
CVE-2025-43484

Poly Clariti Manager - Multiple Security Vulnerabilities

CVSS 6 MEDIUMEPSS 0.2%CWE-79
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
22 Jul 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before rendering it in the response. HP has addressed the issue in the latest software update.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →