CVE-2025-43022

published 2025-07-22

CVE-2025-43022: A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a…

high 7.3 CVSS 4.0

AV A AC L AT P PR H UI N VC H VI H VA H SC L SI L SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A potential SQL injection vulnerability has been identified in the Poly
Clariti Manager for versions prior to 10.12.1. The vulnerability could allow
a privileged user to execute SQL commands. HP has addressed the issue in
the latest software update.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
hp	poly_clariti_manager	< 10.12.2	10.12.2
hp_inc	poly_clariti_manager	—	—

CWE-89