VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Apr 28, 2025· Updated Jun 17, 2026

CVE-2025-23377

CVE-2025-23377

Description

Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Dell/PowerProtect Data Manager Reportingcpe-rescue2 versions
    19.15.0+ 1 more
    • (no CPE)range: 19.15.0
    • (no CPE)range: 19.17, 19.18
  • Dell/Powerprotect Data Manager2 versions
    cpe:2.3:a:dell:powerprotect_data_manager:19.17:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dell:powerprotect_data_manager:19.17:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:powerprotect_data_manager:19.18:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.