CVE-2025-36592 — Dell / Secure Connect Gateway SCG Policy Manager

CVE-2025-36592

Dell / Secure Connect Gateway SCG Policy Manager PUBLISHED

Description (CNA)

Dell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20. 5.22, 5.24, 5.26, 5.28, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected (CNA)

Vendor / product	Versions
Dell / Secure Connect Gateway SCG Policy Manager	affected N/A before 5.32.00.18

CWE

CWE-79

References

https://www.dell.com/support/kbdoc/en-us/000385220/dsa-2025-391-security-update-for-dell-secure-connect-gateway-policy-manager-for-multiple-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.