CVE-2025-21120

moderate-risk
Published 2025-08-04

Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.3/10 High
NETWORK / LOW complexity

Affected Products (20)

Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar
Avamar

Affected Vendors

Dell

References (1)

Vendor Advisory https://www.dell.com/support/kbdoc/en-us/000347698/dsa-2025-271-security-update-...
49
/ 100
moderate-risk
Severity 29/34 · Critical
Exploitability 0/34 · Minimal
Exposure 20/34 · Moderate