CVE-2025-21120

Name of the Vulnerable Software and Affected Versions Dell Avamar versions prior to 19.12 with patch 338905 Dell Avamar version 19.10SP1 with patch 338904 is excluded.

Description Dell Avamar contains a Trusting HTTP Permission Methods on the Server-Side issue in Security. A low privileged attacker with remote access could potentially exploit this issue, leading to Information exposure.

Recommendations Update Dell Avamar to version 19.12 with patch 338905 or later. Apply patch 338905 to versions prior to 19.12. Do not use Dell Avamar version 19.10SP1 with patch 338904.