Dell Openmanage Enterprise vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell Openmanage Enterprise: 10 record(s), with affected versions and fixes.cpe:2.3:a:dell:openmanage_enterprise
CVE-2026-71176
High · 8.8
CWE-89 Aug 19, 2026
SQL Injection in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-54793
Medium · 5.4
CWE-79 Aug 19, 2026
Cross-site Scripting (XSS) in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-70424
Medium · 6.5
CWE-22 Aug 19, 2026
Path Traversal in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-70423
Medium · 6.5
CWE-611 Aug 19, 2026
XML External Entity (XXE) in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-70422
High · 8.8
CWE-89 Aug 19, 2026
SQL Injection in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
CVE-2026-70421
High · 7.2
CWE-269 Aug 19, 2026
Improper Privilege Management in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-56088
High · 8.8
CWE-89 Aug 19, 2026
SQL Injection in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
CVE-2026-54796
High · 7.2
CWE-78 Aug 19, 2026
OS Command Injection in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2026-54795
High · 8.8
CWE-78 Aug 19, 2026
OS Command Injection in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2026-54794
High · 7.2
CWE-918 Aug 19, 2026
Server-Side Request Forgery (SSRF) in Dell Openmanage Enterprise
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.