CVE-2025-46425

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-46425

The CVE-2025-46425 entry concerns Dell Storage Manager (Dell Storage Center) with version 20.1.20, where an XML External Entity (XXE) vulnerability arises from improper restriction of external entities. Root cause: XML processing flaw in the affected component allows a low-privilege, remote attac...

CVE-2025-46425

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

PT-2025-43626

Name of the Vulnerable Software and Affected Versions Dell Storage Manager version 20.1.20 Description Dell Storage Manager contains an Improper Restriction of XML External Entity Reference issue. A low-privileged attacker with remote access could potentially exploit this, leading to unauthorized...

CVE-2025-22477

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-22478

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information...

PT-2025-19884 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.1.20 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection'. This could allow a low-privileged attacker wi...