CVE-2025-46605 — Vulnetix

CVE-2025-46605 PUBLISHED CVSS 6.199999809265137 MEDIUM

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

EPSS 0.02% · 6.8th percentile

Risk Scores

CVSS 3.1

6.199999809265137

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

EPSS Score

0.02%

6.8th percentile

Affected Products

Vendor	Product	Versions
Dell	PowerProtect Data Domain	0

Exploit Intelligence

CIRCL seen: CVE-2025-46605 (circl-sighting)
https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities (circl)

Timeline

Apr 17, 2026 CVE Published
Apr 17, 2026 PoC Published
Apr 18, 2026 Security Advisory
Apr 20, 2026 CVE Updated
May 18, 2026 EPSS Score
May 19, 2026 EPSS Score
May 20, 2026 EPSS Score
May 21, 2026 EPSS Score
May 22, 2026 EPSS Score
May 23, 2026 EPSS Score
May 24, 2026 EPSS Score
May 25, 2026 EPSS Score

References

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-46605 advisory

Open in Interactive Console →