PatchTheCVECVE-2025-21104: Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site (
CVE-2025-21104 is a medium-severity flaw (CVSS 4.3) affecting networker. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redirect') Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulg
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 77%) |
| CISA exploited list | No |
| Weakness | CWE-601 |
| Published | 2025-03-13 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-21104?
networker: upgrade to 19.11.0.4. Exact commands for each OS are on this page.
Is CVE-2025-21104 being exploited?
CVE-2025-21104 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-21104 affect?
CVE-2025-21104 affects networker. Severity is medium (CVSS 4.3). Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redirect') Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially e
How urgent is CVE-2025-21104?
Priority 21/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2025-36582 MEDIUM 4.8 UPGRADE Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation
- CVE-2025-21107 HIGH 7.8 UPGRADE Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted S
- CVE-2025-21103 HIGH 7.8 UPGRADE Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s)
- CVE-2024-42422 HIGH 8.3 UPGRADE Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability
- CVE-2024-22432 HIGH 7.8 UPGRADE Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during b