CVE-2025-21104 Open redirect in NetWorker
Unauthenticated attackers can redirect NetWorker Management Console users to malicious sites, facilitating phishing attacks to steal sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-21104?
CVE-2025-21104 is a medium-severity vulnerability in Dell NetWorker, published on 13 Mar 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redirect') Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
Weakness: CWE-601
Which versions are affected by CVE-2025-21104?
It affects 1 product.
Products include Dell Networker.
How do I fix CVE-2025-21104?
No fix has been published for CVE-2025-21104 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-21104 being exploited?
There is no known exploitation of CVE-2025-21104 in the wild and no public exploit code.
Other vulnerabilities in Dell NetWorker
Sources
Also known as GHSA-5c7g-5xj5-gpx3.