← Database

CVE-2025-23377

MEDIUM CVSS: 4.2 Published: 2025-04-28 Modified: 2026-06-17

Description

Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs.

Affected Platforms

Dell Powerprotect Data Manager

Weakness Type

CWE-116

References