Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Advisory: Dell OpenManage Enterprise — dell.com/support/kbdoc/en-us/000500910/dsa-2026-359-securit… Clear all filters
TI-2026-49861 CVE-2026-71176 · GHSA-8cp6-c94h-9538

SQL injection in Dell OpenManage Enterprise

Priority MEDIUM 40

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
TI-2026-39597 CVE-2026-54793 · GHSA-jhx4-53p5-fq58

Cross-site scripting in Dell OpenManage Enterprise

Priority LOW 24

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2026-08-19 Fixed in 4.7.0 or later CWE-79
TI-2026-39598 CVE-2026-54794 · GHSA-jwgp-qfxq-4m3w

Server-side request forgery in Dell OpenManage Enterprise

Priority LOW 37

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00275 Published 2026-08-19 Fixed in 4.7.0 or later CWE-918
TI-2026-49199 CVE-2026-70424 · GHSA-3cqg-4wgm-99c2

Path traversal in Dell OpenManage Enterprise

Priority LOW 29

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2026-08-19 Fixed in 4.7.0 or later CWE-22
TI-2026-49197 CVE-2026-70422 · GHSA-7p5p-8qph-hfqx

SQL injection in Dell OpenManage Enterprise

Priority MEDIUM 40

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
TI-2026-49198 CVE-2026-70423 · GHSA-mqwp-h5cm-w625

XML external entity injection in Dell OpenManage Enterprise

Priority LOW 29

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00381 Published 2026-08-19 Fixed in 4.7.0 or later CWE-611
TI-2026-40478 CVE-2026-56088 · GHSA-8r6m-54w4-xhmj

SQL injection in Dell OpenManage Enterprise

Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-19 Fixed in 4.7.0 or later CWE-89
TI-2026-39599 CVE-2026-54795 · GHSA-72ww-q9m9-q6fp

OS command injection in Dell OpenManage Enterprise

Priority MEDIUM 44

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02285 Published 2026-08-19 Fixed in 4.7.0 or later CWE-78
TI-2026-49196 CVE-2026-70421 · GHSA-rrwx-x6g9-72r2

Improper privilege management in Dell OpenManage Enterprise

Priority LOW 34

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-08-19 Fixed in 4.7.0 or later CWE-269
TI-2026-39600 CVE-2026-54796 · GHSA-h3jj-78mr-vjxf

OS command injection in Dell OpenManage Enterprise

Priority LOW 38

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02003 Published 2026-08-19 Fixed in 4.7.0 or later CWE-78