CVE-2025-43486

5.7 mediumEPSS 0.2%

Medium (5.7) in hp poly clariti manager. EPSS 0.2% chance of exploitation in the next 30 days.

A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website allows user input to be stored and rendered without proper sanitization. HP has addressed the issue in the latest software update.

Severity

CVSS 4.0

5.7 medium

CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-07-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hp:poly_clariti_manager

References

https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037

Check your stack JSON