8.3
High
CVE-2025-29986 Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to…
Description
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Common Event Enabler 9.0 | earliest → < 9.0.0.0 | 9.0.0.0 |
Other CVEs of Common Event Enabler
The 4 CVEs of Common Event Enabler →
CVE-2025-29985
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default…
6.5
Medium
CVE-2024-28964
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools
7.8
High
CVE-2023-32477
Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability
7.8
High