Approved changes feed: RSS · Atom

cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductStorage Manager (ba778e95-1ce8-5629-bc94-b4c878e0cb11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-23772 vulnerable 2026-06-08 07:51:16.236294 Details available
HIGH (7.3)
Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8.0, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Published: 2026-04-16T08:30:56.774Z
Updated: 2026-04-17T03:55:13.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46425 vulnerable 2026-06-08 07:27:08.223758 Details available
MEDIUM (6.5)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Published: 2025-10-24T14:04:03.635Z
Updated: 2026-02-26T16:57:07.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43995 vulnerable 2026-06-08 07:25:10.561750 Details available
CRITICAL (9.8)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.
Published: 2025-10-24T14:09:55.238Z
Updated: 2026-02-26T16:57:06.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43994 vulnerable 2026-06-08 07:25:10.558328 Details available
HIGH (8.6)
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Published: 2025-10-24T14:14:41.021Z
Updated: 2025-10-24T14:44:14.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22476 vulnerable 2026-06-08 07:10:53.220581 Details available
MEDIUM (5.5)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.
Published: 2025-05-06T16:08:47.526Z
Updated: 2025-05-06T18:05:34.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14384 vulnerable 2026-06-08 05:08:49.857082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14374 vulnerable 2026-06-08 05:08:49.825133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.