CVE-2025-22402 - CERT CVE
ID CVE-2025-22402
Sažetak Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Reference
CVSS
Base: 2.6
Impact: 1.4
Exploitability:1.2
Pristup
VektorSloženostAutentikacija
NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
NONE LOW NONE
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Zadnje važnije ažuriranje 07-02-2025 - 03:15
Objavljeno 07-02-2025 - 03:15