{"id":"CVE-2025-46603","aliases":["EUVD-2025-201499","GHSA-jj3x-g5h8-mg65"],"status":"published","title":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction...","description":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00247,"percentile":0.16112,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-307"],"published":"2025-12-05T19:01:28Z","modified":"2026-06-17T09:26:41Z","products":[{"vendor":"dell","product":"cloudboost virtual appliance"},{"vendor":"dell","product":"cloudboost_virtual_appliance"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000397417/dsa-2025-387-security-update-for-dell-cloudboost-virtual-appliance-multiple-vulnerabilities","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46603"},{"url":"https://github.com/advisories/GHSA-jj3x-g5h8-mg65"}],"sources":{"cve":[{"id":"CVE-2025-46603","description":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2025-12-05T19:01:28.898Z","modified":"2025-12-05T19:15:38.424Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:32:36.706507Z"}],"euvd":[{"id":"EUVD-2025-201499","description":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2025-12-05T19:01:28Z","modified":"2025-12-05T19:15:38Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:09.437744Z"}],"ghsa":[{"id":"GHSA-jj3x-g5h8-mg65","title":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction...","description":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2025-12-05T21:30:23Z","modified":"2025-12-05T21:30:32Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T15:05:03.911166Z"}],"nvd":[{"id":"CVE-2025-46603","description":"Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2025-12-05T19:15:48.233Z","modified":"2026-06-17T09:26:41.78Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:11:49.093461Z"}]}}