Approved changes feed: RSS · Atom

cpe:2.3:a:dell:update_manager_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductUpdate Manager Plugin (788ba324-91cd-58d3-b9bc-02f2247eba9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22402 vulnerable 2026-06-08 07:10:53.034378 Details available
LOW (2.6)
Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2025-02-07T02:08:13.226Z
Updated: 2025-02-07T15:58:21.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28971 vulnerable 2026-06-08 06:33:28.287591 Details available
LOW (3.5)
Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Published: 2024-05-08T15:37:31.837Z
Updated: 2024-08-02T01:03:51.393Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.