Dell Storage Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dell Storage Manager: 4 record(s), with affected versions and fixes.
cpe:2.3:a:dell:storage_manager

CVE-2026-23772 High · 7.3 CWE-269 Apr 16, 2026

Improper Privilege Management in Dell Storage Manager

Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8.0, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2025-43995 Critical · 9.8 CWE-287 Oct 24, 2025

Improper Authentication in Dell Storage Manager

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.

CVE-2025-43994 High · 7.5 CWE-306 Oct 24, 2025

Missing Authentication for Critical Function in Dell Storage Manager

Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2025-46425 Medium · 6.5 CWE-611 Oct 24, 2025

XML External Entity (XXE) in Dell Storage Manager

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.