CVE-2025-43484

6.0 mediumEPSS 0.2%

Medium (6.0) in hp poly clariti manager. EPSS 0.2% chance of exploitation in the next 30 days.

A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before rendering it in the response. HP has addressed the issue in the latest software update.

Severity

CVSS 4.0

6.0 medium

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-07-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hp:poly_clariti_manager

References

https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037

Check your stack JSON