Product
2 published CVES affecting HP Inc Poly CCX, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.
Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.