CVE-2025-23377

low

Description

Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs.

References

https://www.dell.com/support/kbdoc/en-us/000311083/dsa-2025-062-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities

Details

Source: Mitre, NVD

Published: 2025-04-28

Updated: 2025-05-13

Risk Information

CVSS v2

Base Score: 2.9

Vector: CVSS2#AV:L/AC:L/Au:M/C:P/I:P/A:N

Severity: Low

CVSS v3

Base Score: 3.4

Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Severity: Low

EPSS

EPSS: 0.00012