CVE-2020-5377

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and earlier are affected by path traversal vulnerabilities. An unauthenticated remote attacker can send crafted Web API requests with directory traversal sequences to gain file system access on the managed station (arbitrary file read)....

CVE-2019-3723

CVE-2019-3723 affects Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4. The flaw is a web parameter tampering vulnerability arising from improper input parameter validation, allowing a remote unauthenticated attacker to manipulate web request paramete...

CVE-2019-3722

Affected software/Component: Dell EMC OpenManage Server Administrator (OMSA). Vulnerability: XML External Entity (XXE) injection in OMSA prior to 9.1.0.3 and prior to 9.2.0.4. Root cause: XXE vulnerability allowing external entities to be processed in XML requests. Impact: Potential remote read o...

CVE-2023-43079

Dell OpenManage Server Administrator (OMSA) vulnerable in versions 11.0.0.0 and earlier due to Improper Access Control. A local low-privilege user could potentially execute arbitrary code to elevate privileges, risking complete system compromise. Affected products/versions are confirmed in multip...

CVE-2019-3720

CVE-2019-3720 affects Dell EMC OpenManage System Administrator (OMSA) before version 9.3.0. The vulnerability is a Directory Traversal caused by insufficient sanitization of input parameters, enabling a remote authenticated attacker with admin privileges to access parts of the file system. The is...

CVE-2019-3721

CVE-2019-3721 affects Dell EMC OpenManage System Administrator (OMSA) prior to version 9.3.0. The issue is an improper range header processing vulnerability in OMSA’s handling of HTTP Range requests; crafted requests with overlapping ranges can cause the application to compress each requested byt...