Cross-site Scripting Vulnerability in Dell Secure Connect Gateway Policy Manager
CVE-2025-36592

5.4MEDIUM

Key Information:

Vendor

Dell
Status
Secure Connect Gateway Scg Policy Manager
Vendor
CVE Published:
30 October 2025

What is CVE-2025-36592?

The Dell Secure Connect Gateway Policy Manager includes a Cross-site Scripting (XSS) vulnerability that arises from improper neutralization of user inputs in web pages. This flaw can be exploited by unauthenticated attackers who gain remote access, allowing potential script injections that could compromise the integrity of web applications and lead to unauthorized actions.

Affected Version(s)

Secure Connect Gateway SCG Policy Manager < 5.32.00.18

References

https://www.dell.com/support/kbdoc/en-us/000385220/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-36592 : Cross-site Scripting Vulnerability in Dell Secure Connect Gateway Policy Manager