VYPR
← All advisories
High severity8.3NVD Advisory· Published Aug 4, 2025· Updated Jun 17, 2026

CVE-2025-21120

CVE-2025-21120

Description

Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

24
  • Dell/Avamarllm-fuzzy22 versions
    <19.10 SP1 with patch 338904+ 21 more
    • (no CPE)range: <19.10 SP1 with patch 338904
    • cpe:2.3:a:dell:avamar:19.4:*:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.4:*:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.4:*:*:*:virtual:vsphere:*:*
    • cpe:2.3:a:dell:avamar:19.7:*:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.7:*:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.7:*:*:*:virtual:vsphere:*:*
    • cpe:2.3:a:dell:avamar:19.8:*:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.8:*:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.8:*:*:*:virtual:vsphere:*:*
    • cpe:2.3:a:dell:avamar:19.9:*:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.9:*:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.9:*:*:*:virtual:vsphere:*:*
    • cpe:2.3:a:dell:avamar:19.10:-:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.10:-:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.10:-:*:*:virtual:vsphere:*:*
    • cpe:2.3:a:dell:avamar:19.10:sp1:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.10:sp1:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.10:sp1:*:*:virtual:vsphere:*:*
    • cpe:2.3:a:dell:avamar:19.12:*:*:*:virtual:esxi:*:*
    • cpe:2.3:a:dell:avamar:19.12:*:*:*:virtual:vmware:*:*
    • cpe:2.3:a:dell:avamar:19.12:*:*:*:virtual:vsphere:*:*
  • Dell/Avamar Servercpe-rescue
    Range: 19.8 through 19.10
  • Dell/Avamar Virtual Editionv5
    Range: 19.8 through 19.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.