CVE-2025-46699

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Jan 23, 2026

CISA due date

—

The record

Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the Server. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Affected packages

Ecosystem	Package	Introduced	Fixed