CVE-2025-43907 MEDIUM

CVE-2025-43907

Vendor Dell
Product PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release
Weakness CWE-35
Published October 7, 2025
Last update October 7, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Path Traversal: '.../...//' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Key dates

02Disclosure timeline

October 7, 2025 CVE published
October 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-39492 WordPress WHMpress plugin <= 6.2-revision-9 - Local File Inclusion vulnerability CVE-2025-69325 WordPress Primer MyData for Woocommerce plugin <= 4.2.8 - Path Traversal vulnerability CVE-2025-8051 Path traversal validation vulnerability has been discovered in opentext Flipper. CVE-2024-49249 WordPress SMSA Shipping plugin <= 2.3 - Arbitrary File Deletion vulnerability CVE-2025-39598 WordPress Administrator Z plugin <= 2025.03.28 - Directory Traversal Vulnerability