4.3
Medium
CVE-2025-21104 Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open…
Description
Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redirect') Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NetWorker Management Console 19.12 | earliest → 19.12 | No fix stated |
| NetWorker Management Console 19.11 | earliest → 19.11.0.3 | No fix stated |
| NetWorker 19.12 | 19.12 → < 19.12.0.1 | 19.12.0.1 |
| NetWorker 19.11 | earliest → < 19.11.0.4 | 19.11.0.4 |
Other CVEs of NetWorker Management Console
The 4 CVEs of NetWorker Management Console →
CVE-2025-21103
Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an…
7.8
High
CVE-2024-47476
Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature…
7.8
High
CVE-2022-34368
Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient…
6.1
Medium