s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-2025-32749

📛 CVE Title

CVE-2025-32749

⬇ Download JSON ⚠ View as Threat

Description

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Overview

State
PUBLISHED
Assigner (CNA)
dell
CVSS severity
MEDIUM
CVSS score
CVSS 5.3 / 10 5.3 5.3 / 10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Effective score
5.3 / 10 MEDIUM source: CNA overview
CWE(s)
CWE-276
Reserved
2025-04-10
Published
2026-05-22 12:48 UTC
Last updated
2026-05-22 14:01 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32749.json
Linked Threat
CVE-2025-32749 — CVE-2025-32749

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

EPSS score
0.0002 (probability of exploitation in next 30 days)
EPSS percentile
3.98% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD / KEV / EPSS data refreshed 2026-05-25 00:16 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID
EUVD-2025-209919
Assigner
dell
Published
May 22, 2026, 12:48:14 PM
Updated
May 22, 2026, 2:01:31 PM
EUVD base score (CVSS 3.1)
5.3 / 10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EUVD-reported EPSS
0.0400
Vendors
Dell
Products
PowerFlex Manager (Rack) (0 <3.7.8.0)
PowerFlex Manager (Rack) (0 <3.8.3.0)
PowerFlex Manager (Appliance) (0 <IC 48.378.00)
PowerFlex Manager (Appliance) (0 <IC 48.383.00)
PowerFlex Manager (0 ≤4.6.2)
Aliases
GHSA-xprc-xvh6-w68r

ENISA description: Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

EUVD references (2)

Affected products (3)
VendorProductVersionsPlatforms
Dell PowerFlex Manager (Appliance) 0 (affected), 0 (affected) —
Dell PowerFlex Manager (Rack) 0 (affected), 0 (affected) —
Dell PowerFlex Manager 0 (affected) —

Vendor references (2)

References embedded in the original CVE record by the assigning CNA.

Web references (5)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

Remediations (17)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

  • Windows 11, version 25H2 known issues and notifications
    web:learn.microsoft.com

    Windows 11, version 25H2 is now available for all eligible devices. Devices running Home and Pro editions of Windows 11 that are not managed by IT departments will receive the update to Windows 11, version 25H2 through the machine learning-based intelligent rollout.

    2026-05-26 03:09 UTC
  • Nvd - Cve-2025-32749
    web:nvd.nist.gov

    An official website of the United States government Here's how you know

    2026-05-26 03:09 UTC
  • Windows 11 KB5074109 & KB5073455 cumulative updates released
    web:www.bleepingcomputer.com

    Microsoft has released Windows 11 KB5074109 and KB5073455 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

    2026-05-26 03:09 UTC
  • February's Patch Tuesday release fixes 59 flaws ... - Computerworld
    web:www.computerworld.com

    Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...

    2026-05-26 03:09 UTC
  • Windows 11 KB5074109, KB5073455 January 2026 Patch Tuesday ... - Neowin
    web:www.neowin.net

    Microsoft has released Patch Tuesday updates for Windows 11 KB5074109, KB5073455 for January 2026. Here's what's included.

    2026-05-26 03:09 UTC
  • Microsoft fixes 167 security flaws in April, second biggest Patch ...
    web:www.pcworld.com

    This month's Patch Tuesday includes an actively exploited Office zero-day vulnerability and several critical RCE bugs in Windows and Remote Desktop.

    2026-05-26 03:09 UTC
  • Microsoft's Patch Tuesday Update Targets 120 Security Flaws
    web:www.techrepublic.com

    Microsoft's May Patch Tuesday fixes 120 flaws, including 31 remote code execution bugs, with no zero-days reported at release.

    2026-05-26 03:09 UTC
  • CVE-2025-32749 | Tenable®
    web:www.tenable.com

    Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

    2026-05-26 03:09 UTC
  • Microsoft confirms Windows 11 January 2026 Update issues, releases fix ...
    web:www.windowslatest.com

    Microsoft has confirmed that the Windows 11 January 2026 Update is causing at least three major issues, rolling out fixes for two bugs.

    2026-05-26 03:09 UTC
  • Patch Tuesday May 2026: Security Updates & CVE Analysis
    web:zecurit.com

    Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

    2026-05-26 03:09 UTC
  • CVE-2025-32749 | Medium | CVETodo
    web:cvetodo.com

    How do I fix CVE-2025-32749 ? To remediate CVE-2025-32749 : Check Dell's security advisories for official patches and updates. Update PowerFlex Manager (Appliance), PowerFlex Manager (Rack), PowerFlex Manager to the latest patched version. Review the references section below for vendor advisories and mitigation guidance.

    2026-06-03 22:31 UTC
  • Security Update Guide - Microsoft
    web:portal.msrc.microsoft.com

    The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

    2026-06-03 22:31 UTC
  • UPDATE: Microsoft Releases Guidance on Exploitation of ... - CISA
    web:www.cisa.gov

    . For more information see MAR-251132.c1.v1 Exploitation of SharePoint Vulnerabilities and CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities. Update (07/31/ 2025 ): CISA has updated this alert to provide clarification on antivirus and endpoint detection and response (EDR) solutions, and details regarding mitigations related to the IIS server. Update (07 ...

    2026-06-03 22:31 UTC
  • ArcGIS Server Security 2025 Update 2 Patch - Esri
    web:www.esri.com

    Key highlights The ArcGIS Server Security 2025 update 2 is available This patch resolves 10 Medium severity vulnerabilities This security patch is cumulative, and includes fixes provided in the ArcGIS Server Security 2025 update 1.

    2026-06-03 22:31 UTC
  • KB5087054 - Details, Issues, & Feedback - NinjaOne
    web:www.ninjaone.com

    Overview KB5087054 is a cumulative security update for the .NET Framework released on May 12, 2026, targeting Windows 11 version 24H2 systems. This patch addresses critical security vulnerabilities within both .NET Framework 3.5 and 4.8.1, which are fundamental components used by numerous enterprise and consumer applications for runtime execution and framework functionality. The update is ...

    2026-06-03 22:31 UTC
  • Patch Tuesday - October 2025 - Rapid7
    web:www.rapid7.com

    Microsoft has published 172 new vulnerabilities, including six zero-day vulnerabilities. Windows 10 moves past the end of support, sort of. Critical RCE in Windows Server Update Service.

    2026-06-03 22:31 UTC
  • Patch Tuesday 2025 Year In Review | Tenable®
    web:www.tenable.com

    Key takeaways: Microsoft's 2025 Patch Tuesday releases addressed 1,130 CVEs . This is the second year in a row where the CVE count was over 1,000. Elevation of Privilege vulnerabilities accounted for 38.3% of all Patch Tuesday vulnerabilities in 2025 , followed by Remote Code Execution flaws at 30.8%. 41 zero-day vulnerabilities were addressed across all Patch Tuesday releases in 2025 , including ...

    2026-06-03 22:31 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2025-32749.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-32749",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T14:00:42.420377Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T14:01:31.144Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PowerFlex Manager (Appliance)",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "IC 48.378.00",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "IC 48.383.00",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerFlex Manager (Rack)",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "3.7.8.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.8.3.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerFlex Manager",
          "vendor": "Dell",
          "versions": [
            {
              "lessThanOrEqual": "4.6.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2025-11-13T06:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Dell PowerFlex Manager, version(s) &lt;=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure."
            }
          ],
          "value": "Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "CWE-276: Incorrect Default Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T12:48:14.947Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2025-32749",
    "datePublished": "2026-05-22T12:48:14.947Z",
    "dateReserved": "2025-04-10T05:03:51.740Z",
    "dateUpdated": "2026-05-22T14:01:31.144Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}