CVE-2025-21120

MEDIUM 6.5CVE-2025-21120 · Published 04/08/2025 · updated 17/06/2026

In short

CVE-2025-21120 is a MEDIUM (CVSS 6.5) vulnerability affecting avamar (dell).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
avamar dell	`= 19.10= 19.12= 19.4= 19.7= 19.8= 19.9`	No fix yet

Description

Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

References

dell.com/support/kbdoc/en-us/000347698/dsa-2025-271-security-update-for-dell-avamar-and-dell-avamar-virtual-edition-multiple-vulnerabilities · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free