DeutschShown in its original language — a full translation is planned for a future version.
Poly Clariti Manager: Mehrere Schwachstellen
view advisory published 2025-07-23
Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Poly Clariti Manager ausnutzen, um beliebige SQL- und OS-Befehle auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen preiszugeben und sich erhöhte Rechte zu verschaffen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-43489US | medium5.2 | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validat… | ||||
| CVE-2025-43488US | medium4.8 | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS fi… | ||||
| CVE-2025-43487US | medium6.8 | — | ||
A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly imple… | ||||
| CVE-2025-43486US | medium4.8 | — | ||
A potential stored cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website allows user input to be stored and… | ||||
| CVE-2025-43485US | medium4.5 | — | ||
A potential security
vulnerability has been identified in the Poly Clariti Manager for versions
prior to 10.12.2. The vulnerability could potentially allow a privileged
user to ret… | ||||
| CVE-2025-43484US | medium6.1 | — | ||
A potential reflected cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website does not validate or sanitize th… | ||||
| CVE-2025-43483US | medium5.7OT elevated | — | ||
A potential security vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
vulnerability could allow the retrieval of hardcoded cryptogra… | ||||
| CVE-2025-43022US | high7.2 | — | ||
A potential SQL injection vulnerability has been identified in the Poly
Clariti Manager for versions prior to 10.12.1. The vulnerability could allow
a privileged user to execute SQ… | ||||
| CVE-2025-43021US | medium5.7OT elevated | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default… | ||||
| CVE-2025-43020US | medium6.8 | — | ||
A potential command
injection vulnerability has been identified in the Poly Clariti Manager for
versions prior to 10.12.2. The vulnerability could allow a privileged user
to submit… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan