OpenManage Enterprise vulnerabilities
22 known vulnerabilities in OpenManage Enterprise from Dell. 22 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vul
- 8.0 High severity
OpenManage Enterprise: Improper Neutralization of Argument Delimiters in a Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerabili
- 7.1 High severity
OpenManage Enterprise: Authentication Bypass by Spoofing
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.
- 8.8 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability
- 8.8 High severity
OpenManage Enterprise: Missing Authentication for Critical Functionality
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Server-side request fo
- 8.0 High severity
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation…
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution.
- 8.8 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability
- 7.2 High severity
OpenManage Enterprise: Improper Neutralization of Argument Delimiters in a Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leadi
- 7.2 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerabilit
- 7.8 High severity
OpenManage Enterprise: Improper Privilege Management
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 7.2 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerabilit
- 8.8 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an SQL Command
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, lead
- 8.8 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an SQL Command
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, lead
- 7.2 High severity
OpenManage Enterprise: Improper Privilege Management
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
- 8.8 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an SQL Command
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, lead
- 7.2 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerabilit
- 8.8 High severity
OpenManage Enterprise: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability
- 7.2 High severity
OpenManage Enterprise: Server-Side Request Forgery
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
- 8.8 High severity
Dell OpenManage Enterprise: Improper Control of Generation of Code
Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code executio
- 7.8 High severity
Dell OpenManage Enterprise: Insufficiently Protected Credentials
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevat
- 7.5 High severity
Dell OpenManage Enterprise: Improper Limitation of a Pathname to a Restricted Directory
Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privilege
- 8.8 High severity
OpenManage Enterprise: Improper Authorization
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized