CVE-2024-37130

CVE-2024-37130 (Dell OpenManage Server Administrator) is a Local Privilege Escalation via XSL Hijacking . Affected: Dell OpenManage Server Administrator versions 11.0.1.0 and prior . Root cause: an XSL hijack path enabling a local, low-privileged user to escalate to the admin user, potentially le...

Dell OpenManage Server Administrator Local Lift Vulnerability

Dell OpenManage Server Administrator is a server management tool for server monitoring and configuration. Dell OpenManage Server Administrator suffers from a local elevation vulnerability caused by XSL Hijacking, which can be exploited by a low-privileged attacker to elevate to administrator...

CVE-2023-43079

Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to execute arbitrary code in order to elevate privileges on the system. Exploitation may lead to...

CVE-2023-43079

Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to execute arbitrary code in order to elevate privileges on the system. Exploitation may lead to...

Dell OpenManage Server Administrator Access Control Error Vulnerability

Dell OpenManage Server Administrator Dell OMSA is a software agent from Dell Dell USA. It provides a comprehensive one-to-one system management solution in two ways. An Access Control Error vulnerability exists in Dell OpenManage Server Administrator version 11.0.0.0 and prior versions, which...

PT-2023-28686 · Dell · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Server Administrator versions 11.0.0.0 and prior Description: The issue is related to an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to execute...

CVE-2022-34396

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

Design/Logic Flaw

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

CVE-2022-34396

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

CVE-2022-34396

Dell OpenManage Server Administrator (OMSA) 10.3.0.0 and earlier contains a DLL Injection vulnerability that lets a local, authenticated, low-privilege attacker execute arbitrary code with elevated privileges, potentially compromising the system. Affected component: OMSA DLL injection in the Dell...

PT-2023-13377 · Dell · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Server Administrator OMSA versions 10.3.0.0 and earlier Description: The issue allows a local low privileged authenticated attacker to potentially exploit a DLL Injection Vulnerability, leading to the execution of arbitrary...

Dell OpenManage Server Administrator Authentication Bypass (DSA-2021-040)

Binary data dellomsacve-2021-21513.nbin...

Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...

Dell EMC OpenManage Server Administrator Authentication Bypass Vulnerability

DELL Dell EMC OpenManage Server Administrator is a set of system management solutions from DELL, USA. The program supports online diagnostics, system operation detection, device management, etc. Microsoft Windows is a desktop operating system from Microsoft Corporation. The Dell EMC OpenManage...

Dell EMC OpenManage Server Administrator Path Traversal Vulnerability (CNVD-2021-14397)

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

Path traversal

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

CVE-2021-21514

Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and earlier are affected by a path traversal vulnerability that allows a remote attacker with administrator privileges to view arbitrary files via a specially crafted URL request. This is due to a flaw in OMSA prior to 9.5, as detailed ...

PT-2021-14570 · Dell Emc · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior Description: The issue allows a remote user with admin privileges to potentially view arbitrary files on the target system by sending a specially crafted URL request. This c...

Dell OpenManage Server Administrator Path Traversal (DSA-2020-172)

The version of Dell OpenManage Server Administrator OMSA running on the remote host is affected by a path traversal vulnerability due to improper sanitization of user-supplied input to a web API request. An unauthenticated, remote attacker can exploit this, via a crafted request, to gain file...