CVE-2025-36592

Dell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20. 5.22, 5.24, 5.26, 5.28, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

• CWE-79

• https://www.dell.com/support/kbdoc/en-us/000385220/dsa-2025-391-security-update-for-dell-secure-connect-gateway-policy-manager-for-multiple-vulnerabilitiesVendor Advisory

Published

Oct 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-36580Dell Wyse Management Suite, versions prior to WMS 5.2, conta…4.8
• CVE-2025-36581Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and …5.5
• CVE-2025-36582Dell NetWorker, versions 19.12.0.1 and prior, contains a Sel…7.5
• CVE-2025-36588Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s)…8.8
• CVE-2025-36589Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) …7.1
• CVE-2025-3659Improper authentication handling was identified in a set of …9.4
• CVE-2025-36593Dell OpenManage Network Integration, versions prior to 3.8, …8.8
• CVE-2025-36594Dell PowerProtect Data Domain with Data Domain Operating Sys…9.8
• CVE-2025-36595Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contai…7.2
• CVE-2025-36597Dell Avamar, versions prior to 19.12 with patch 338905, cont…4.7
• CVE-2025-36598Dell Avamar, versions prior to 19.12 with patch 338905, cont…6.5
• CVE-2025-36599Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contai…6.5