CVE-2025-26483

תיאור (מקור, אנגלית)

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.

מדדים

CVSS 3.1

8.2 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-5/8/2026

CWE

CWE-601

מוצרים מושפעים

dell: powerflex appliance intelligent catalog; dell: powerflex manager; dell: powerflex rack

קישורים

• https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-updat‮… Vendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-updat‮… Vendor Advisory