Vulnerability Database

309,469

Total vulnerabilities in the database

CVE-2025-22478

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

  • Published: May 6, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-22478
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
dell / storage_manager 16.3.20 16.3.20.x
dell / storage_manager 2016-r2.1 2016-r2.1.x
dell / storage_manager 2020-r1 2020-r1.x
dell / storage_manager 2020-r1.10 2020-r1.10.x
dell / storage_manager 2020-r1.2 2020-r1.2.x
dell / storage_manager 2020-r1.20 2020-r1.20.x