CVE-2025-14432

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

CVSS 4.0

8.1CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

CVSS 3.1

4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-25)

CWE

CWE-532

Published

2025-12-16

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• hp:poly_tcos
• hp:poly_videoos

References

• https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080

Check your stackJSON