HP Poly Clariti Manager vulnerabilities

14 CVEs affecting HP Poly Clariti Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-43489, published 2025-07-23.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-41913, published 2024-08-06. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input.
• CVE-2024-41912, published 2024-08-07. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls.
• CVE-2025-43022, published 2025-07-22. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has…
• CVE-2025-43020, published 2025-07-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a privileged user to submit arbitrary input.…
• CVE-2025-43489, published 2025-07-23. Medium severity, CVSS 5.2. EPSS: 0.3% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validation. HP has…
• CVE-2024-41910, published 2024-08-06. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used.
• CVE-2024-41911, published 2024-08-06. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation.
• CVE-2025-43487, published 2025-07-23. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly implement access…
• CVE-2025-43488, published 2025-07-23. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS filter by submitting…
• CVE-2025-43484, published 2025-07-23. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before…

Latest

• CVE-2025-43486, published 2025-07-23. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website allows user input to be stored and rendered without…
• CVE-2025-43485, published 2025-07-23. Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could potentially allow a privileged user to retrieve credentials…
• CVE-2025-43483, published 2025-07-23. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the retrieval of hardcoded cryptographic keys. HP…
• CVE-2025-43021, published 2025-07-22. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has…