CVE-2025-22478

8.1 highEPSS 0.3%

High (8.1) in dell storage manager. EPSS 0.3% chance of exploitation in the next 30 days.

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2025-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:storage_manager

References

https://www.dell.com/support/kbdoc/en-us/000317318/dsa-2025-191-security-update-for-storage-center-dell-storage-manager-vulnerabilities

Check your stack JSON