CVE-2018-15768

🗓️ 30 Nov 2018 17:00:00Reported by dellType

cve🔗 web.nvd.nist.gov👁 85 Views🌐 WEB

Dell OpenManage Network Manager <6.5.0 File System Access Vulnerabilit

Reporter	Title	Published	Views	Family All 13
0day.today	Dell OpenManage Network Manager 6.2.0.51 SP3 Privilege Escalation Exploit	7 Nov 201800:00	–	zdt
0day.today	Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities	14 Nov 201800:00	–	zdt
Circl	CVE-2018-15768	6 Nov 201815:48	–	circl
CNVD	Dell OpenManage Network Manager Improper Access Control Vulnerability	6 Nov 201800:00	–	cnvd
Check Point Advisories	Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15768)	6 Dec 201800:00	–	checkpoint_advisories
Cvelist	CVE-2018-15768 Insecure MySQL Configuration Vulnerability	30 Nov 201817:00	–	cvelist
Exploit DB	Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities	14 Nov 201800:00	–	exploitdb
exploitpack	Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities	14 Nov 201800:00	–	exploitpack
KoreLogic Security	Dell OpenManage Network Manager Multiple Vulnerabilities	5 Nov 201800:00	–	korelogic
NVD	CVE-2018-15768	30 Nov 201817:29	–	nvd

NVD

Vulners

Node

dell openmanage_network_managerRange<6.5.0

[
  {
    "product": "OpenManage Network Manager",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "6.5.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities
securityfocus	www.securityfocus.com/bid/105914
exploit-db	www.exploit-db.com/exploits/45852/

Parameter	Position	Path	Description	CWE
cmd	query param	nvhelp/<8-char>.jsp	Web shell backdoor created via injected JSP on the OpenManage Network Manager vulnerable component (SQL backdoor for remote root).	CWE-732

17 Jun 2026 01:43Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24

CVSS 36.5

EPSS0.09051

CWE-732