CVE-2025-38745 MEDIUM

CVE-2025-38745

Vendor Dell

Product OpenManage Enterprise

Weakness CWE-532 · Sensitive info in logs

Published August 14, 2025

Last update August 14, 2025

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Key dates

02Disclosure timeline

August 14, 2025 CVE published

August 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-38745 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2024-37930 WordPress SmartMag theme < 10.1.0 - Sensitive Data Exposure via Log File vulnerability CVE-2025-53885 Directus doesn't redact sensitive user data when logging via event hooks CVE-2023-45825 Token in custom credentials object can leak through logs in ydb-go-sdk CVE-2024-31259 WordPress SearchIQ plugin <= 4.5 - Sensitive Data Exposure via Log File vulnerability CVE-2025-0495 Secrets leakage to telemetry endpoint via cache backend configuration via buildx