Dell Storage Manager 2020 R1.20

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:storage_manager:2020:r1.20:*:*:*:*:*:*

part: a version: 2020 update: r1.20

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductStorage Manager (ba778e95-1ce8-5629-bc94-b4c878e0cb11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-46425 vulnerable 2026-06-08 07:27:08.227072 Details available
MEDIUM (6.5)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Published: 2025-10-24T14:04:03.635Z
Updated: 2026-02-26T16:57:07.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43995 vulnerable 2026-06-08 07:25:10.561834 Details available
CRITICAL (9.8)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.
Published: 2025-10-24T14:09:55.238Z
Updated: 2026-02-26T16:57:06.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43994 vulnerable 2026-06-08 07:25:10.561358 Details available
HIGH (8.6)
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Published: 2025-10-24T14:14:41.021Z
Updated: 2025-10-24T14:44:14.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23379 vulnerable 2026-06-08 07:10:55.609763 Details available
LOW (3.5)
Dell Storage Center - Dell Storage Manager, version(s) 21.0.20, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
Published: 2025-05-06T15:25:06.049Z
Updated: 2025-05-06T15:45:22.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22479 vulnerable 2026-06-08 07:10:53.228774 Details available
LOW (3.5)
Dell Storage Center - Dell Storage Manager, version(s) 20.0.21, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
Published: 2025-05-06T15:46:45.181Z
Updated: 2025-05-06T18:57:43.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22478 vulnerable 2026-06-08 07:10:53.227796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22477 vulnerable 2026-06-08 07:10:53.227016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22476 vulnerable 2026-06-08 07:10:53.223947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.