CVE-2025-22478: Dell Storage Manager

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Affected products

• Dell Storage Manager: version 16.3.20 only; version 2016 only; version 2020 only

Published 2025-05-06. Last modified 2026-06-17.