Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

36 records

Priority LOW 27

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.00201 Published 2026-11-02 Fixed in 4.8.0 or later CWE-22
Priority LOW 23

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00093 Published 2026-11-02 Fixed in 4.8.0 or later CWE-732
Priority LOW 30

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00083 Published 2026-11-02 Fixed in 4.8.0 or later CWE-347
Priority LOW 24

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00132 Published 2026-11-02 Fixed in 4.8.0 or later CWE-732
Priority MEDIUM 41

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02164 Published 2026-11-02 Fixed in 4.8.0 or later CWE-78
Priority LOW 31

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00136 Published 2026-11-02 Fixed in 4.8.0 or later CWE-347
Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0068 Published 2026-11-02 Fixed in 4.8.0 or later CWE-88
Priority LOW 25

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00207 Published 2026-11-02 Fixed in 4.8.0 or later CWE-22
Priority LOW 27

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.00248 Published 2026-11-02 Fixed in 4.8.0 or later CWE-22
Priority MEDIUM 45

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02711 Published 2026-10-30 Fixed in 4.8.0 or later CWE-78
Priority LOW 31

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00237 Published 2026-10-30 Fixed in 4.8.0 or later CWE-290
Priority LOW 32

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00277 Published 2026-10-30 Fixed in 4.8.0 or later CWE-74
TI-2026-49861 CVE-2026-71176 · GHSA-8cp6-c94h-9538

SQL injection in Dell OpenManage Enterprise

Priority MEDIUM 40

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
Priority LOW 24

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2026-08-19 Fixed in 4.7.0 or later CWE-79
Priority LOW 37

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00275 Published 2026-08-19 Fixed in 4.7.0 or later CWE-918
TI-2026-49199 CVE-2026-70424 · GHSA-3cqg-4wgm-99c2

Path traversal in Dell OpenManage Enterprise

Priority LOW 29

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2026-08-19 Fixed in 4.7.0 or later CWE-22
TI-2026-49197 CVE-2026-70422 · GHSA-7p5p-8qph-hfqx

SQL injection in Dell OpenManage Enterprise

Priority MEDIUM 40

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
Priority LOW 29

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00381 Published 2026-08-19 Fixed in 4.7.0 or later CWE-611
TI-2026-40478 CVE-2026-56088 · GHSA-8r6m-54w4-xhmj

SQL injection in Dell OpenManage Enterprise

Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
Priority MEDIUM 44

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02285 Published 2026-08-19 Fixed in 4.7.0 or later CWE-78
Priority LOW 34

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-08-19 Fixed in 4.7.0 or later CWE-269
Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02003 Published 2026-08-19 Fixed in 4.7.0 or later CWE-78
Priority LOW 28

Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00247 Published 2025-08-14 No fix listed CWE-532
Load more