Priority LOW 27
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.00201 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-22
Priority LOW 23
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00093 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-732
Priority LOW 30
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00083 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-347
Priority LOW 24
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-732
Priority MEDIUM 41
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.02164 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-78
Priority LOW 31
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.00149 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-79
Priority LOW 31
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00136 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-347
Priority LOW 38
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.0068 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-88
Priority LOW 25
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00207 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-22
Priority LOW 27
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.00248 · Published 2026-11-02 · Fixed in 4.8.0 or later CWE-22
Priority LOW 31
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-321
Priority MEDIUM 45
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02711 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-78
Priority LOW 20
OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability.
CVSS 3.1MEDIUM 4.7· Local · High privileges · No interaction · EPSS 0.00106 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-413
Priority LOW 24
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00138 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-732
Priority LOW 31
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.00237 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-290
Priority LOW 24
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability.
CVSS 3.1MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00229 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-306
Priority LOW 32
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability.
CVSS 3.1MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00277 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-74
Priority LOW 36
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00264 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-20
Priority LOW 24
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.
CVSS 3.1MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00216 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-307
Priority LOW 19
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00221 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-522
Priority LOW 31
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00281 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-89
Priority LOW 13
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00276 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-918
Priority LOW 34
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0047 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-88
Priority LOW 39
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02835 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-78
Priority LOW 35
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-10-30 · Fixed in 4.8.0 or later CWE-269
Load more
THREATIST.IORead the docs