Advisories · Technology
Dell OpenManage Enterprise.
Every CVE that names Dell OpenManage Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Path traversal in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Path traversal
- CVSS 5.5 Medium
Incorrect permission assignment in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Broken access control
- CVSS 6.4 Medium
Improper signature verification in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Weak cryptography or TLS
- CVSS 5.5 Medium
Incorrect permission assignment in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Broken access control
- CVSS 8.0 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 6.8 Medium
Cross-site scripting in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Improper signature verification in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Weak cryptography or TLS
- CVSS 4.6 Medium
Argument injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 5.7 Medium
Path traversal in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Path traversal
- CVSS 6.1 Medium
Path traversal in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Path traversal
- CVSS 7.3 High
Hard-coded cryptographic key in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Hard-coded credentials
- CVSS 8.8 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 4.7 Medium
OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability.
- Dell OpenManage Enterprise
- CWE-413
- CVSS 5.5 Medium
Incorrect permission assignment in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Broken access control
- CVSS 7.1 High
Authentication bypass by spoofing in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Authentication bypass
- CVSS 5.4 Medium
Missing authentication in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Authentication bypass
- CVSS 6.8 Medium
Injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Other injection
- CVSS 8.0 High
Improper input validation in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- CWE-20
- CVSS 5.4 Medium
Unlimited authentication attempts in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Authentication bypass
- CVSS 4.3 Medium
Insufficiently protected credentials in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Hard-coded credentials
- CVSS 7.1 High
SQL injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- SQL injection
- CVSS 2.7 Low
Server-side request forgery in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Argument injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 7.2 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 7.8 High
Improper privilege management in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Privilege escalation
- CVSS 7.2 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 8.8 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 8.8 High
SQL injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- SQL injection
- CVSS 4.6 Medium
Cross-site scripting in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Cross-site scripting (XSS)
- CVSS 7.2 High
Server-side request forgery in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Path traversal in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Path traversal
- CVSS 8.1 High
SQL injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- SQL injection
- CVSS 6.5 Medium
XML external entity injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- XML external entities (XXE)
- CVSS 7.1 High
SQL injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- SQL injection
- CVSS 8.8 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 7.2 High
Improper privilege management in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Privilege escalation
- CVSS 7.2 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection
- CVSS 4.8 Medium
Sensitive information in log files in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Information disclosure
- CVSS 4.3 Medium
SQL injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- SQL injection
- CVSS 8.0 High
Code injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Code injection
- CVSS 5.1 Medium
Cross-site scripting in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Cross-site scripting (XSS)
- CVSS 5.2 Medium
Improper access control in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Broken access control
- CVSS 6.3 Medium
Plaintext password storage in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- CWE-256
- CVSS 5.7 Medium
Path traversal in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
Improper authorization in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Broken access control
- CVSS 9.6 CriticalCritical · CVSS 9+
Information disclosure in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Information disclosure
- CVSS 9.1 CriticalCritical · CVSS 9+
Dell OpenManage Enterprise: Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection…
- Dell OpenManage Enterprise
- CVSS 7.7 High
Information disclosure in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
Information disclosure in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Information disclosure
- CVSS 7.9 High
Path traversal in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Path traversal
- CVSS 5.4 Medium
XML external entity injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- XML external entities (XXE)
- CVSS 7.6 High
Improper input validation in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- CWE-20
- CVSS 9.0 CriticalCritical · CVSS 9+
SQL injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- SQL injection
- CVSS 8.3 High
OS command injection in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Command injection