Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-32748

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this

Description

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to trigger redirections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell PowerFlex rack

Default version status: unaffected

  • 0 to < 3.9.1.1 or lateraffected
  • 0 to < 3.8.4.1 or lateraffected

References