Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
References
Configurations
Configuration 1 (hide)
|
History
04 Nov 2025, 14:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities - Vendor Advisory | |
| CPE | cpe:2.3:a:dell:storage_manager:2020:r1:*:*:*:*:*:* cpe:2.3:a:dell:storage_manager:2020:r1.10:*:*:*:*:*:* cpe:2.3:a:dell:storage_manager:2020:r1.20:*:*:*:*:*:* cpe:2.3:a:dell:storage_manager:2020:r1.2:*:*:*:*:*:* cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:* |
|
| First Time |
Dell
Dell storage Manager |
24 Oct 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-24 14:15
Updated : 2025-11-04 14:26
NVD link : CVE-2025-46425
Mitre link : CVE-2025-46425
CVE.ORG link : CVE-2025-46425
JSON object : View
Products Affected
dell
- storage_manager
CWE
CWE-611
Improper Restriction of XML External Entity Reference