What is the CVSS score of CVE-2025-22399?

CVE-2025-22399 has a CVSS 3.1 base score of 7.9 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Utility Configuration Collector Edge are affected by CVE-2025-22399?

CVE-2025-22399 presents notable security risk, a server-side request forgery vulnerability rated CVSS 7.9.. A patch is available.

How to fix or mitigate CVE-2025-22399?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Implement egress filtering and URL validation for server-side requests.

Utility Configuration Collector Edge CVE-2025-22399

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2025-02-11 security_alert@emc.com

Dell SSRF Utility Configuration Collector Edge

7.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.9 HIGH

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:26 vuln.today

Patch released

Mar 28, 2026 - 18:26 nvd

Patch available

CVE Published

Feb 11, 2025 - 17:15 nvd

HIGH 7.9

DescriptionCVE.org

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery

AnalysisAI

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. Rated high severity (CVSS 7.9), this vulnerability is no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

Technical ContextAI

This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918), which allows attackers to make the server perform requests to unintended internal or external resources. Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery Affected products include: Dell Utility Configuration Collector Edge. Version information: version 2.3.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate and allowlist destination URLs, block requests to internal networks, use network segmentation.