CVE-2025-43020: HP Poly Clariti Manager

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a privileged user to submit arbitrary input. HP has addressed the issue in the latest software update.

Affected products

• HP Poly Clariti Manager: before 10.12.2 (fixed in 10.12.2)

Published 2025-07-22. Last modified 2026-06-17.