Dell Xtremio Management Server vulnerabilities

7 CVEs affecting Dell Xtremio Management Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30105, published 2025-07-30.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18578, published 2020-03-13. Critical severity, CVSS 9.0. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious…
• CVE-2022-31228, published 2022-10-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account.
• CVE-2021-21549, published 2021-05-21. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged…
• CVE-2019-18577, published 2020-03-13. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability. A malicious local user with XtremIO xinstall privileges may exploit this vulnerability to gain…
• CVE-2019-18576, published 2020-03-13. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files…
• CVE-2025-26332, published 2025-07-30. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could…
• CVE-2025-30105, published 2025-07-30. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this…