CVE-2025-30105 HIGH

CVE-2025-30105

Vendor Dell
Product XtremIO
Weakness CWE-532 · Sensitive info in logs
Published July 30, 2025
Last update February 26, 2026

CVSS base score

8.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Key dates

02Disclosure timeline

July 30, 2025 CVE published
February 26, 2026 Record updated