CVE-2025-43022

A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update.

Score

CVSS 4.0 7.3 High

Status

Analyzed - hp-security-alert@hp.com

Published

2025-07-22

Last modified

2025-07-23

Weaknesses

CWE-89

Affected products

• Poly Clariti Manager (Hp)
• Poly Clariti Manager (Hp Inc.)

References

• https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037