CVE-2025-23377

Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs.

Score

CVSS 3.1 4.2 Medium

Status

Analyzed - security_alert@emc.com

Published

2025-04-28

Last modified

2025-04-28

Weaknesses

CWE-116

Affected products

• Powerprotect Data Manager (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000311083/dsa-2025-062-security-update-for-dell-powerprotect-data-manager-mult…