CVE-2024-25971

CVE-2024-25971 is an XML External Entity (XXE) Injection vulnerability affecting Dell PowerProtect Data Manager version 19.15. A remote, highly privileged attacker can exploit this flaw to achieve information disclosure or denial-of-service, as indicated by its CVSS score of 6.5 (Medium). While the vulnerability has a moderate risk score and low EPSS, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.