CVE-2025-43938: Dell Powerprotect Data Manager

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to gain unauthorized access with privileges of the compromised account.

Affected products

• Dell Powerprotect Data Manager: before 19.21 (fixed in 19.21)

Published 2025-09-10. Last modified 2026-06-17.