Dell Storage Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:dell_storage_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Dell Storage Manager (82d2eb10-656a-5831-b801-2941b7437fdc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-46425 |
vulnerable | 2026-06-08 07:27:08.222829 |
Details available
MEDIUM (6.5)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Published: 2025-10-24T14:04:03.635Z
Updated: 2026-02-26T16:57:07.459Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43995 |
vulnerable | 2026-06-08 07:25:10.561708 |
Details available
CRITICAL (9.8)
Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.
Published: 2025-10-24T14:09:55.238Z
Updated: 2026-02-26T16:57:06.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43994 |
vulnerable | 2026-06-08 07:25:10.557712 |
Details available
HIGH (8.6)
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Published: 2025-10-24T14:14:41.021Z
Updated: 2025-10-24T14:44:14.598Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.