DSA-2025-047: Security Update for Dell Update Manager Plugin Vulnerability
Riepilogo: Dell Update Manager Plugin (UMP) remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.
Questo articolo si applica a
Questo articolo non si applica a
Questo articolo non è legato a un prodotto specifico.
Non tutte le versioni del prodotto sono identificate in questo articolo.
Impatto
Low
Dettagli
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-22402 |
Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure. |
2.6 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-22402 |
Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure. |
2.6 |
Prodotti interessati e correzione
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Update Manager Plugin |
Versions 1.5.0 through 1.6.0 |
Version 1.7.0 |
Dell OpenManage Enterprise Update Managerv1.7 | Driver Details | Dell US |
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Update Manager Plugin |
Versions 1.5.0 through 1.6.0 |
Version 1.7.0 |
Dell OpenManage Enterprise Update Managerv1.7 | Driver Details | Dell US |
No action required from the customer if UMP version 1.7.0 is already installed by the customer. However, we recommend following the workaround mentioned above.
Soluzioni alternative e mitigazioni
|
CVE ID |
Workaround and Mitigation |
|
CVE-2025-22402 |
Sanitization done with user input |
Cronologia delle revisioni
|
Revision |
Date |
Description |
|
1.0 |
2025-02-06 |
Initial Release |
Informazioni correlate
Dichiarazione di non responsabilità
Prodotti interessati
Dell UpdateProprietà dell'articolo
Numero articolo: 000281885
Tipo di articolo: Dell Security Advisory
Ultima modifica: 06 feb 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.