Medium severity6.1NVD Advisory· Published Jul 23, 2025· Updated Jun 17, 2026

CVE-2025-43484

Description

A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before rendering it in the response. HP has addressed the issue in the latest software update.

Affected products

Polycom/Clariti Managerllm-create
Range: <10.12.1
HP Inc./Poly Clariti Managerv5
Range: See HP Security Bulletin reference for affected versions.

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000