CVE-2025-43486
Poly Clariti Manager - Multiple Security Vulnerabilities
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 jul 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A potential stored cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website allows user input to be stored and rendered without proper
sanitization. HP has addressed the issue in the latest software update.
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Productos afectados
HP Inc. · Poly Clariti Manager¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →