PT-2025-44417 · Dell · Dell Secure Connect Gateway (Scg) Policy Manager

Published 2025-10-30 · Updated 2025-11-10 · CVE-2025-36592

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway (SCG) Policy Manager versions 5.20 through 5.28

Description Dell Secure Connect Gateway (SCG) Policy Manager contains an Improper Neutralization of Input During Web Page Generation issue, also known as Cross-site Scripting. A remote, unauthenticated attacker could potentially exploit this, leading to script injection.

Recommendations Update Dell Secure Connect Gateway (SCG) Policy Manager to a version later than 5.28.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-36592

Affected Products

Dell Secure Connect Gateway (Scg) Policy Manager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-36592 · Security Note
• https://dell.com/support/kbdoc/en-us/000385220/dsa-2025-391-security-update-for-dell-secure-connect-gateway-policy-manager-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-36592 · Vendor Advisory
• https://t.me/cveNotify/142313 · Telegram Post
• https://twitter.com/CVEnew/status/1983925236895547418 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1984034815889268959 · Twitter Post
• https://t.me/CVEtracker/36200 · Telegram Post