CVE-2025-43020

published 2025-07-22

CVE-2025-43020: A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a…

medium 5.7 CVSS 4.0

AV A AC L AT P PR H UI N VC H VI N VA N SC L SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A potential command
injection vulnerability has been identified in the Poly Clariti Manager for
versions prior to 10.12.2. The vulnerability could allow a privileged user
to submit arbitrary input. HP has addressed the issue in the latest software update.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
hp	poly_clariti_manager	< 10.12.2	10.12.2
hp_inc	poly_clariti_manager	—	—

CWE-78