CVE-2024-41910

The CVE-2024-41910 entry refers to Poly Clariti Manager devices, with firmware builds up to 10.10.2.2 affected. The connected documents specify multiple cross-site scripting (XSS) vulnerabilities in the JavaScript used by the firmware. There are no explicit exploitation details provided in the do...

CVE-2024-41913

Poly Clariti Manager devices (firmware up to 10.10.2.2) are affected by a vulnerability where user input is not properly sanitized, enabling an arbitrary file upload pathway. Several sources associate this with potential remote code execution or arbitrary file upload risk. The issue affects Poly ...

CVE-2024-41912

Poly Clariti Manager firmware builds up to 10.10.2.2 are affected by a flaw that fails to properly enforce access controls, potentially enabling unauthorized access. Affected product/versions: Poly Clariti Manager devices up to 10.10.2.2. Root cause: firmware-level access-control flaw (per multip...

CVE-2025-43487

The CVE-2025-43487 entry pertains to the HP Poly Clariti Manager prior to version 10.12.2. Root cause: an improper implementation of access controls that enables privilege escalation via a Sudo vulnerability. Impact: potential elevation of privileges within affected deployments. Remediation: upgr...

CVE-2024-41911

CVE-2024-41911 affects HP Poly Clariti Manager devices (firmware up to 10.10.2.2). Root cause: input not properly neutralized during web page generation, enabling stored XSS in the web UI. Reported impact is a web‑page level vulnerability; remediation is to update to firmware >10.10.2.2, speci...

CVE-2025-43483

CVE-2025-43483 affects Hewlett-Packard Poly Clariti Manager prior to version 10.12.1. The issue could allow retrieval of hardcoded cryptographic keys due to the underlying vulnerability in Poly Clariti Manager components. HP has addressed the issue in the latest software update, with remediation ...

CVE-2025-43485

CVE-2025-43485: In HP Poly Clariti Manager versions prior to 10.12.2 , a vulnerability could allow a privileged user to retrieve credentials from log files. HP has addressed the issue in the latest software update; remediation is to upgrade to 10.12.2 or later . Documented impact focuses on confi...

CVE-2025-43022

The vulnerability CVE-2025-43022 affects the Poly Clariti Manager prior to version 10.12.1. The issue is a potential SQL injection where a privileged user could execute SQL commands. Impact details in the sources indicate high severity with possible consequences to confidentiality, integrity, and...

CVE-2025-43021

CVE-2025-43021 affects Poly Clariti Manager prior to 10.12.1. The issue allows the use or retrieval of the default password. HP has addressed the issue in the latest software update; affected versions are Poly Clariti Manager

CVE-2025-43489

CVE-2025-43489 affects Hewlett-Packard Poly Clariti Manager prior to 10.12.1. The issue is a deserialization of untrusted data without validation in Poly Clariti Manager. HP has addressed the issue in the latest software update (version 10.12.1 or later). Connected documents confirm the affected ...

CVE-2025-43484

CVE-2025-43484 describes a reflected cross-site scripting vulnerability in HP Poly Clariti Manager before version 10.12.1. The issue arises because user input is not validated or sanitized before rendering in responses. The vulnerability impacts Poly Clariti Manager installations prior to 10.12.1...

CVE-2025-43020

CVE-2025-43020 affects the Poly Clariti Manager prior to 10.12.2. The vulnerability is a command injection risk where a privileged user could submit arbitrary input through the manager, potentially leading to command execution. Multiple sources identify Poly Clariti Manager versions

CVE-2025-43486

CVE-2025-43486 affects Poly Clariti Manager (HP). A stored cross-site scripting (XSS) vulnerability exists in versions prior to 10.12.1 where user input is stored and rendered without proper sanitization. Root cause: insufficient input sanitization on the website that stores user input. Impact: p...

CVE-2025-43488

CVE-2025-43488 affects Poly Clariti Manager versions before 10.12.2. The vulnerability could allow bypassing the XSS filter by submitting untrusted characters. HP addresses the issue in the latest software update; remediation is to upgrade to Poly Clariti Manager 10.12.2 or later. The available c...