CVE-2025-21120

8.3 HIGH

Published: August 04, 2025 Modified: February 25, 2026

Description

Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://www.dell.com/support/kbdoc/en-us/000347698/dsa-2025-271-security-update-for-dell-avamar-and-dell-avamar-virtual-edition-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

1 reference(s) from NVD

Quick Stats

CVSS v3 Score

8.3 / 10.0

EPSS (Exploit Probability)

0.0%

14th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-650

Affected Vendors

dell

Related CVEs

CVE-2026-2072 8.2

CVE-2026-1166 4.3

CVE-2026-4784 7.3

CVE-2026-4766 6.4

CVE-2026-4783 6.3