Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

36 records in Openmanage Enterprise · all components

TI-2026-83090 CVE-2026-91913 · GHSA-j3rr-c7jx-36jr

OS command injection in Dell OpenManage Enterprise

Priority MEDIUM 45

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02711 Published 2026-10-30 Fixed in 4.8.0 or later CWE-78
TI-2021-04648 CVE-2021-21564 · GHSA-39hh-9mhm-44jx

Information disclosure in Dell OpenManage Enterprise

Priority MEDIUM 45

Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01584 Published 2021-08-09 Fixed in Open Manage Enterprise 3.6.1 CWE-200
TI-2026-39599 CVE-2026-54795 · GHSA-72ww-q9m9-q6fp

OS command injection in Dell OpenManage Enterprise

Priority MEDIUM 44

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02285 Published 2026-08-19 Fixed in 4.7.0 or later CWE-78
TI-2021-04676 CVE-2021-21596 · GHSA-wmx3-7ph3-xh3p

Information disclosure in Dell OpenManage Enterprise

Priority MEDIUM 43

Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0075 Published 2021-08-09 Fixed in 3.6.2 CWE-200
TI-2021-04666 CVE-2021-21585 · GHSA-j44h-4q9g-h2pm

OS command injection in Dell OpenManage Enterprise

Priority MEDIUM 43

Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02091 Published 2021-08-09 Fixed in 3.6.1 CWE-78
TI-2026-83795 CVE-2026-94349 · GHSA-55m3-hxc6-w53v

Dell OpenManage Enterprise OS Command Injection

Priority MEDIUM 41

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02164 Published 2026-11-02 Fixed in 4.8.0 or later CWE-78
TI-2024-30734 CVE-2024-45766 · GHSA-7xjr-h9cq-3633

Code injection in Dell OpenManage Enterprise

Priority MEDIUM 41

Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00584 Published 2024-10-17 Fixed in 4.2.0 CWE-94
TI-2022-10101 CVE-2022-26857 · GHSA-rcjr-g4h4-fpfv

Improper authorization in Dell OpenManage Enterprise

Priority MEDIUM 41

Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00988 Published 2022-05-26 Fixed in 3.8.4 CWE-285
TI-2026-49861 CVE-2026-71176 · GHSA-8cp6-c94h-9538

SQL injection in Dell OpenManage Enterprise

Priority MEDIUM 40

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
TI-2026-49197 CVE-2026-70422 · GHSA-7p5p-8qph-hfqx

SQL injection in Dell OpenManage Enterprise

Priority MEDIUM 40

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
TI-2026-83788 CVE-2026-91909 · GHSA-qrv3-ww3c-9jp8

Argument injection in Dell OpenManage Enterprise enables commands

Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0068 Published 2026-11-02 Fixed in 4.8.0 or later CWE-88
TI-2026-40478 CVE-2026-56088 · GHSA-8r6m-54w4-xhmj

SQL injection in Dell OpenManage Enterprise

Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
TI-2026-39600 CVE-2026-54796 · GHSA-h3jj-78mr-vjxf

OS command injection in Dell OpenManage Enterprise

Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02003 Published 2026-08-19 Fixed in 4.7.0 or later CWE-78
TI-2026-39598 CVE-2026-54794 · GHSA-jwgp-qfxq-4m3w

Server-side request forgery in Dell OpenManage Enterprise

Priority LOW 37

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00275 Published 2026-08-19 Fixed in 4.7.0 or later CWE-918
TI-2021-04665 CVE-2021-21584 · GHSA-2j5w-q8vw-5g5m

Information disclosure in Dell OpenManage Enterprise

Priority LOW 35

Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0081 Published 2021-08-09 Fixed in 3.6.1 CWE-200
TI-2026-49196 CVE-2026-70421 · GHSA-rrwx-x6g9-72r2

Improper privilege management in Dell OpenManage Enterprise

Priority LOW 34

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-08-19 Fixed in 4.7.0 or later CWE-269
TI-2024-17044 CVE-2024-25944 · GHSA-m3m6-68fj-x8xv

Path traversal in Dell OpenManage Enterprise

Priority LOW 34

Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00765 Published 2024-03-29 No fix listed CWE-23
TI-2026-83092 CVE-2026-91915 · GHSA-g6qw-w7c7-fc4f

Script injection in Dell OpenManage Enterprise

Priority LOW 32

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00277 Published 2026-10-30 Fixed in 4.8.0 or later CWE-74
TI-2026-83794 CVE-2026-91908 · GHSA-p7q9-hhq2-8rq4

Dell OpenManage Enterprise fails to verify signatures

Priority LOW 31

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00136 Published 2026-11-02 Fixed in 4.8.0 or later CWE-347
TI-2026-83091 CVE-2026-91914 · GHSA-vxmm-jqx6-38qf

Authentication bypass by spoofing in Dell OpenManage Enterprise

Priority LOW 31

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00237 Published 2026-10-30 Fixed in 4.8.0 or later CWE-290
TI-2024-30735 CVE-2024-45767 · GHSA-rc48-r6qm-2vg9

SQL injection in Dell OpenManage Enterprise

Priority LOW 31

Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00316 Published 2024-10-17 Fixed in 4.2.0 CWE-89
TI-2026-83791 CVE-2026-91905 · GHSA-p44r-fjrp-45f9

Improper signature verification in Dell OpenManage Enterprise

Priority LOW 30

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00083 Published 2026-11-02 Fixed in 4.8.0 or later CWE-347
Load more
Open these records in search →