CVE-2025-22402: Dell Update Manager Plugin

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Affected products

• Dell Update Manager Plugin: from 1.5.0, before 1.7.0 (fixed in 1.7.0)

Published 2025-02-07. Last modified 2026-06-17.