Dell Networker vulnerabilities

9 CVEs affecting Dell Networker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36582, published 2025-07-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-25539, published 2023-05-31. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the…
CVE-2023-28055, published 2023-09-27. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a…
CVE-2025-21104, published 2025-03-13. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redirect') Vulnerability in NetWorker Management Console. An unauthenticated…
CVE-2024-42422, published 2024-12-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
CVE-2025-36582, published 2025-07-01. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulnerability. An unauthenticated attacker with remote access…
CVE-2023-24568, published 2023-05-30. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates.
CVE-2025-21103, published 2025-02-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of server-side vulnerability. An unauthenticated attacker…
CVE-2025-21107, published 2025-01-30. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could…
CVE-2024-22432, published 2024-01-25. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker…