PT-2025-18079 · Dell · Dell Powerprotect Data Manager Reporting

Published 2025-04-24 · Updated 2025-05-13 · CVE-2025-23376

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager Reporting versions 19.16 through 19.18

Description The issue is related to an Improper Neutralization of Special Elements Used in a Template Engine. A high privileged attacker with local access could potentially exploit this, leading to information disclosure.

Recommendations For versions 19.16 through 19.18, update to a version that contains a fix for this issue, as using a vulnerable version could lead to information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-1336

CWE-94

Related Identifiers

BDU:2025-05912

CVE-2025-23376

Affected Products

Dell Powerprotect Data Manager Reporting

References · 12

• https://bdu.fstec.ru/vul/2025-05912 · Security Note
• https://dell.com/support/kbdoc/en-us/000311083/dsa-2025-062-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23376 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23376 · Vendor Advisory
• https://twitter.com/cybercronai/status/1916886487762620885 · Twitter Post
• https://twitter.com/CVEnew/status/1916868899737415835 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025042514 · Note
• https://t.me/cvedetector/23932 · Telegram Post
• https://t.me/cvenotify/121902 · Telegram Post
• https://twitter.com/cybercronai/status/1917226250474606981 · Twitter Post
• https://t.me/cvetracker/22531 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1916890316205858907 · Twitter Post