CVE-2025-21104

Description

Dell NetWorker, 19.11.0.3 and below versions, contain(s) an Open Redirect Vulnerability in NMC. An unauthenticated attacker with remoter access could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

Reserved 2024-11-22 | Published 2025-03-13 | Updated 2025-03-13 | Assigner dell

Problem types

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Product status

Default status
unaffected

Any version
affected

References

www.dell.com/...for-http-host-header-injection-vulnerability vendor-advisory

cve.org (CVE-2025-21104)

nvd.nist.gov (CVE-2025-21104)

Download JSON