CVE-2025-22478CWE-611

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability

High · published May 6, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-05-06T15:55Z
EPSS history
Timeline
  • 06 MAY 15:55Z
    Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability
    cvelistv5