CVE-2025-43484mediumCWE-79

CVE-2025-43484: medium-severity vulnerability in HP Inc. Poly Clariti Manager

Poly Clariti Manager - Multiple Security Vulnerabilities

Published · Updated

Follow this CVE+ Monitor Poly Clariti Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6epss 0.2%
A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before rendering it in the response. HP has addressed the issue in the latest software update.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Affected products
HP Inc. · Poly Clariti Manager
Related CVEs — HP Inc. Poly Clariti Manager

In the same product, most dangerous first.

CVE-2024-41913HIGHClariti Manager – Arbitrary File UploadEPSS 0.5%CVE-2024-41912CRITICALCVE-2024-41912EPSS 0.5%CVE-2025-43022HIGHPoly Clariti Manager - Multiple Security VulnerabilitiesEPSS 0.4%CVE-2025-43020MEDIUMPoly Clariti Manager - Multiple Security VulnerabilitiesEPSS 0.3%CVE-2025-43489LOWPoly Clariti Manager - Multiple Security VulnerabilitiesEPSS 0.3%CVE-2024-41910MEDIUMCVE-2024-41910EPSS 0.3%