CVE-2025-22395: Dell Update Package Framework

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary remote scripts on the server. Exploitation may lead to a denial of service by an attacker.

Affected products

• Dell Update Package Framework: before 22.01.02 (fixed in 22.01.02)

Published 2025-01-07. Last modified 2026-06-17.