CVE-2025-43489

MEDIUM

Poly Clariti Manager <10.12.1 - Deserialization

Title source: llm
STIX 2.1

Description

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validation. HP has addressed the issue in the latest software update.

References (1)

Core 1

Scores

CVSS v3 5.2
EPSS 0.0034
EPSS Percentile 56.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-502
Status published
Products (1)
hp/poly_clariti_manager < 10.12.2
Published Jul 23, 2025
Tracked Since Feb 18, 2026