CVE-2025-22478

Dell Storage Center / Dell Storage Manager version 20.1.20 is affected by an XML External Entity (XXE) vulnerability caused by improper restriction of external entity references in XML processing. An unauthenticated attacker with adjacent network access could trigger information disclosure and da...

CVE-2025-23379

The provided records identify CVE-2025-23379 affecting Dell Storage Center (Dell Storage Manager) version 21.0.20, with a vulnerability described as an Improper Neutralization of Input During Web Page Generation (Cross-site Scripting). An unauthenticated attacker with adjacent network access coul...

CVE-2025-22477

Dell Storage Center (Dell Storage Manager) version 20.1.20 is affected by an Improper Authentication vulnerability that enables Elevation of Privileges when an unauthenticated, adjacent-network attacker accesses the system. The connected PT-2025-19885 entry reinforces this and provides a remediat...

CVE-2025-22479

Summary: CVE-2025-22479 affects Dell Storage Center / Dell Storage Manager, version 20.0.21. The root cause is an improper limitation of a pathname to a restricted directory, i.e., a path traversal that could allow an unauthenticated, adjacent-network attacker to inject scripts. The public docume...