CVE-2025-22399 — HIGH (7.9)

Vulnerability Description

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery

CVSS Score

7.9

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

LOW

Affected Products

Vendor	Product	Versions
Dell	Utility Configuration Collector Edge	2.3.0

Related Weaknesses (CWE)

CWE-918

References

https://www.dell.com/support/kbdoc/en-us/000279299/dsa-2025-043-security-update-PatchVendor Advisory

FAQ

What is CVE-2025-22399?

CVE-2025-22399 is a vulnerability with a CVSS score of 7.9 (HIGH). Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Se...

How severe is CVE-2025-22399?

CVE-2025-22399 has been rated HIGH with a CVSS base score of 7.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-22399?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Utility Configuration Collector Edge.