CVE-2025-46699 MEDIUM

CVE-2025-46699

Vendor Dell

Product Data Protection Advisor

Weakness CWE-1336

Published January 23, 2026

Last update January 23, 2026

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the Server. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Key dates

02Disclosure timeline

January 23, 2026 CVE published

January 23, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-46699 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1336.html

Related vulnerabilities

04Related CVE

CVE-2024-42355 Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag CVE-2025-65106 LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates CVE-2024-45053 Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine CVE-2024-56326 Jinja has a sandbox breakout through indirect reference to format method CVE-2026-33154 dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver