CVE-2018-15767

🗓️ 30 Nov 2018 17:00:00Reported by dellType

cve🔗 web.nvd.nist.gov👁 101 Views🌐 WEB

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability

Reporter	Title	Published	Views	Family All 15
zdt	Dell OpenManage Network Manager 6.2.0.51 SP3 Privilege Escalation Exploit	7 Nov 201800:00	–	zdt
zdt	Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities	14 Nov 201800:00	–	zdt
Circl	CVE-2018-15767	6 Nov 201815:48	–	circl
CNVD	Dell OpenManage Network Manager Improper Authorization Vulnerability	6 Nov 201800:00	–	cnvd
Check Point Advisories	Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15767)	6 Dec 201800:00	–	checkpoint_advisories
Cvelist	CVE-2018-15767 Improper Authorization Vulnerability	30 Nov 201817:00	–	cvelist
Exploit DB	Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities	14 Nov 201800:00	–	exploitdb
exploitpack	Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities	14 Nov 201800:00	–	exploitpack
KoreLogic Security	Dell OpenManage Network Manager Multiple Vulnerabilities	5 Nov 201800:00	–	korelogic
NVD	CVE-2018-15767	30 Nov 201817:29	–	nvd

NVD

Vulners

Node

dell openmanage_network_managerRange<6.5.3

[
  {
    "product": "OpenManage Network Manager",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "6.5.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "6.5.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105912
dell	www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities
exploit-db	www.exploit-db.com/exploits/45852/

Parameter	Position	Path	Description	CWE
cmd	path	/nvhelp/	The appliance can be exploited to host a JSP shell in the /nvhelp/ directory. Once the shell is placed, an attacker can make HTTP requests to the shell's path to execute arbitrary commands via the 'cmd' parameter.	CWE-285, CWE-284

17 Jun 2026 01:43Current

8.5High risk

Vulners AI Score8.5

CVSS 38.8

CVSS 29

EPSS0.12324

CWE-863