Product:
Data Protection Advisor
Summary
Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the Server. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-46699 |
Exploitation
An attacker with low privileges and remote access can exploit this vulnerability by sending specially crafted requests to the server. This could allow the attacker to manipulate the template engine, potentially leading to the exposure of sensitive information.
Affected Products
- Dell Data Protection Advisor: Affected versions prior to 19.12 contain vulnerabilities that could be exploited by low privileged attackers.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell Data Protection Advisor version 19.12 or later. Additionally, implementing network security measures to restrict unauthorized access can help reduce the risk of exploitation.