CVE-2025-26335

Katalog CVE

CVSS 4.9 · Medium EPSS 0,33%

Kerentanan Insertion of Sensitive Information Into Sent Data pada dell powerprotect cyber recovery. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Rincian

Terbit di NVD

11 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-201: Insertion of Sensitive Information Into Sent Data

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-us/000306005/dsa-2025-113-security-update-for-dell-powerprotect-cyber-re... advisory vendor