GCVE - cpe:2.3:h:dell:xtremio_x2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dell:xtremio_x2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Xtremio X2 (`bebf9188-d95e-56b2-b210-a9ac148bd6be`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-30105`	not_vulnerable	2026-06-08 07:16:59.081959	Details available HIGH (8.8) Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. Published: 2025-07-30T17:50:38.998Z Updated: 2026-02-26T17:50:02.728Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26332`	not_vulnerable	2026-06-08 07:12:51.541330	Details available HIGH (8.8) TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. Published: 2025-07-30T17:55:55.248Z Updated: 2026-02-26T17:50:01.657Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34453`	not_vulnerable	2026-06-08 05:44:53.564812	Details available HIGH (7.6) Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default. Published: 2023-08-03T12:50:15.362Z Updated: 2024-10-15T14:11:37.393Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000204809/dsa-2022-290-dell-xtremio-x2-security-advisory-for-xms-gui?lang=en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31228`	not_vulnerable	2026-06-08 05:43:40.545318	Details available HIGH (8.1) Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account. Published: 2022-10-12T19:25:32.974Z Updated: 2025-05-15T17:54:08.184Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000204112/dsa-2022-145-dell-emc-xtremeio-for-ssh-and-web-ui-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21549`	not_vulnerable	2026-06-08 05:29:12.313542	Details available HIGH (8.8) Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations. Published: 2021-05-21T20:05:11.576Z Updated: 2024-09-16T18:08:03.709Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000186363	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.