CVE-2025-14432
Medium
Description
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
SeverityMedium
CVSS4.9
Exploit probability—
ProductHp Poly Videoos
PublishedDec 16, 2025
First seenDec 16, 2025
Weakness typeCWE-532CWE-532
How to fix
Update
- hp poly_videoos4.6.1-444242 or later
- hp poly_tcos6.6.1-7001859 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp poly_videoos | v < 4.6.1-444242 | 4.6.1-444242 |
| hp poly_tcos | v < 6.6.1-7001859 | 6.6.1-7001859 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.