A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used.
https://support.hp.com/us-en/document/ish_11006981-11007005-16/hpsbpy03960