Dell Storage Manager vulnerabilities

3 vulnerabilities

Known vulnerabilities in Dell Storage Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2025-43994delldell storage manager+1
EPSS score
0.60%
Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8CVE-2025-43995delldell storage manager+1
EPSS score
0.84%
Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.6.5CVE-2025-46425delldell storage manager+1
EPSS score
0.33%
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.