CVE-2025-23376
CVSS 3.1 Score 4.4 of 10 (medium)
Details
Published Apr 28, 2025
Updated: May 13, 2025
CWE ID 94
CWE ID 1336
Summary
CVE-2025-23376 is a vulnerability affecting Dell PowerProtect Data Manager Reporting versions 19.16, 19.17, and 19.18. This issue involves an Improper Neutralization of Special Elements Used in a Template Engine, allowing a high privileged attacker with local access to potentially exploit the flaw and disclose sensitive information. By manipulating the template engine, an attacker could gain unauthorized access to data. System administrators are advised to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Dell