{"id":"CVE-2025-43022","aliases":["EUVD-2025-22394","GHSA-vvgj-pgpc-h747"],"status":"published","title":"Poly Clariti Manager - Multiple Security Vulnerabilities","description":"A potential SQL injection vulnerability has been identified in the Poly\nClariti Manager for versions prior to 10.12.1. The vulnerability could allow\na privileged user to execute SQL commands. HP has addressed the issue in\nthe latest software update.","severity":{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0039,"percentile":0.33433,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-07-22T23:05:24Z","modified":"2026-06-17T09:23:25Z","products":[{"vendor":"hp","product":"poly_clariti_manager"},{"vendor":"hp inc.","product":"poly clariti manager"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43022"},{"url":"https://github.com/advisories/GHSA-vvgj-pgpc-h747"}],"sources":{"cve":[{"id":"CVE-2025-43022","title":"Poly Clariti Manager - Multiple Security Vulnerabilities","description":"A potential SQL injection vulnerability has been identified in the Poly\nClariti Manager for versions prior to 10.12.1. The vulnerability could allow\na privileged user to execute SQL commands. HP has addressed the issue in\nthe latest software update.","status":"published","published":"2025-07-22T23:05:24.07Z","modified":"2025-07-23T20:10:32.249Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:26.964524Z"}],"euvd":[{"id":"EUVD-2025-22394","description":"A potential SQL injection vulnerability has been identified in the Poly\nClariti Manager for versions prior to 10.12.1. The vulnerability could allow\na privileged user to execute SQL commands. HP has addressed the issue in\nthe latest software update.","status":"published","published":"2025-07-22T23:05:24Z","modified":"2025-07-23T20:10:32Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","level":"high"}],"updated_at":"2026-11-02T20:32:04.806066Z"}],"ghsa":[{"id":"GHSA-vvgj-pgpc-h747","title":"A potential SQL injection vulnerability has been identified in the Poly\nClariti Manager for...","description":"A potential SQL injection vulnerability has been identified in the Poly\nClariti Manager for versions prior to 10.12.1. The vulnerability could allow\na privileged user to execute SQL commands. HP has addressed the issue in\nthe latest software update.","status":"published","published":"2025-07-23T00:30:32Z","modified":"2025-10-02T18:31:57Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:03:50.19975Z"}],"nvd":[{"id":"CVE-2025-43022","description":"A potential SQL injection vulnerability has been identified in the Poly\nClariti Manager for versions prior to 10.12.1. The vulnerability could allow\na privileged user to execute SQL commands. HP has addressed the issue in\nthe latest software update.","status":"published","published":"2025-07-22T23:15:24.81Z","modified":"2026-06-17T09:23:25.36Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:19.382856Z"}]}}