CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-22395

Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary remote scripts on the server. Exploitation may lead to a denial of service by an attacker.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.5%

CVSS Severity

CVSS v3 Score 8.2

References

https://www.dell.com/support/kbdoc/en-us/000269079/dsa-2025-034-security-update-for-dell-update-package-dup-framework-vulnerability

Products affected by CVE-2025-22395

Dell » Update Package Framework » Version: N/A

cpe:2.3:a:dell:update_package_framework:-
Dell » Update Package Framework » Version: 19.1.0.413

cpe:2.3:a:dell:update_package_framework:19.1.0.413
Dell » Update Package Framework » Version: 3.8.3.67

cpe:2.3:a:dell:update_package_framework:3.8.3.67
Dell » Update Package Framework » Version: 4.9.4.36

cpe:2.3:a:dell:update_package_framework:4.9.4.36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-22395

Products

Pricing

Contact Us