CVE-2025-43995

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.

• CWE-287

• https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilitiesVendor Advisory

Published

Oct 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43989The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi…6.5
• CVE-2025-43990Dell Command Monitor (DCM), versions prior to 10.12.3.28, co…7.8
• CVE-2025-43991SupportAssist for Home PCs versions 4.8.2 and prior and Supp…7.1
• CVE-2025-43992Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectSca…5.6
• CVE-2025-43993Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and…7.8
• CVE-2025-43994Dell Storage Center - Dell Storage Manager, version(s) DSM 2…7.5
• CVE-2025-44000A reflected cross-site scripting (xss) vulnerability exists …6.1
• CVE-2025-44001Mattermost Confluence Plugin version <1.5.0 fails to check t…4
• CVE-2025-44002Race Condition in the Directory Validation Logic in the Team…6.1
• CVE-2025-44003Missing Release of Resource after Effective Lifetime (CWE-77…4.3
• CVE-2025-44004Mattermost Confluence Plugin version <1.5.0 fails to check t…7.2
• CVE-2025-44005An attacker can bypass authorization checks and force a Step…10