CVE-2020-5321

Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an input validation flaw. The vulnerability allows a remote authenticated attacker with high privileges to spawn tasks with elevated privileges. Root cause: impro...

CVE-2020-5320

Summary: CVE-2020-5320 affects Dell EMC OpenManage Enterprise (OME) and OpenManage Enterprise-Modular (OME-M). The vulnerability is a SQL injection in versions prior to OME 3.2 and OME-M prior to 1.10.00. A remote authenticated attacker with high privileges could potentially execute SQL commands ...

CVE-2020-5370

Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 are affected by an arbitrary file overwrite vulnerability. The issue arises from a directory traversal during tar extraction, allowing a remote authenticated attacker with high privileges to overwrite arbitrary files by injecting maliciou...

CVE-2020-5323

Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 are affected by an injection vulnerability. A remote authenticated attacker with low privileges could potentially access sensitive information or cause a denial of servic...