CVE-2025-43488 | THREATINT

Description

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS filter by submitting untrusted characters. HP has addressed the issue in the latest software update.

Reserved 2025-04-16 | Published 2025-07-22 | Updated 2025-07-22 | Assigner hp

LOW: 2.0CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status

unknown

See HP Security Bulletin reference for affected versions.

affected

References

support.hp.com/...ument/ish_12781425-12781447-16/hbsbpy04037

cve.org (CVE-2025-43488)

nvd.nist.gov (CVE-2025-43488)

Download JSON