4.2
Medium
CVE-2025-23377 Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of…
Description
Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerProtect Data Manager 19.15 | 19.15.0 → 19.18.0-23 | No fix stated |
Other CVEs of PowerProtect Data Manager
The 27 CVEs of PowerProtect Data Manager →
CVE-2026-73600
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level…
7.8
High
CVE-2026-68860
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability
6.8
Medium
CVE-2026-74769
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the…
6.5
Medium
CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF)…
4.1
Medium