ByteOS Network

NVD Vulnerability Details :

CVE-2025-38745

Analyzed

Source-security_alert@emc.com

Published At-14 Aug, 2025 | 15:15

Updated At-19 Aug, 2025 | 19:12

Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.8	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CPE Matches

Dell Inc.

>>openmanage_enterprise>>3.10

cpe:2.3:a:dell:openmanage_enterprise:3.10:*:*:*:*:*:*:*

Dell Inc.

>>openmanage_enterprise>>4.0

cpe:2.3:a:dell:openmanage_enterprise:4.0:*:*:*:*:*:*:*

Dell Inc.

>>openmanage_enterprise>>4.1.0

cpe:2.3:a:dell:openmanage_enterprise:4.1.0:*:*:*:*:*:*:*

Dell Inc.

>>openmanage_enterprise>>4.2.0

cpe:2.3:a:dell:openmanage_enterprise:4.2.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-532	Primary	security_alert@emc.com

References

Hyperlink	Source	Resource
https://www.dell.com/support/kbdoc/en-us/000356351/dsa-2025-314-security-update-for-dell-openmanage-enterprise-vulnerability	security_alert@emc.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History