CVE-2024-25944

CVE-2024-25944 affects Dell OpenManage Enterprise (Dell OpenManage Enterprise, v4.0 and prior). A path traversal vulnerability allows an unauthenticated attacker to access files on the server filesystem with the web application’s privileges. Connected sources confirm versions 4.0 and earlier are ...

CVE-2021-21596

Dell OpenManage Enterprise (3.4–3.6.1) and OpenManage Enterprise Modular (1.20.00–1.30.00) contain a remote code execution vulnerability (CVE-2021-21596) that can lead to information disclosure and privilege elevation when an attacker on the same subnet can exploit exposed services. Several conne...

CVE-2024-28961

Dell OpenManage Enterprise vulnerable in versions 4.0.0 and 4.0.1 to a sensitive information disclosure that could let a local, low-privileged attacker obtain credentials and gain elevated access. The publicly documented description does not specify the exact root cause or exploit details in thes...

CVE-2024-28979

Dell OpenManage Enterprise (Dell EMC) before 4.1.0 is affected by an improper neutralization of input during web page generation (Cross-site Scripting). The vulnerability arises from insufficient input filtering/escaping in the web UI, enabling a high-privilege remote attacker to inject scripts v...

CVE-2024-45767

Dell OpenManage Enterprise (OME) before 4.2.0 contains an SQL injection vulnerability due to improper neutralization of special elements in SQL commands. A low-privilege, remote attacker could cause information disclosure. Publicly documented in CVE-2024-45767 and corroborated by NVD/CVEC/Vuln en...

CVE-2021-21585

CVE-2021-21585 affects Dell OpenManage Enterprise (prior to 3.6.1). The vulnerability is an OS command injection in the RACADM and IPMI tools. An authenticated remote attacker with high privileges could potentially exploit this flaw to execute arbitrary OS commands on affected systems. The issue ...

CVE-2021-21584

Dell OpenManage Enterprise 3.5 and OpenManage Enterprise-Modular 1.30.00 are affected by an information disclosure vulnerability allowing an authenticated, low-privilege attacker to potentially exfiltrate OIDC server credentials. Affected component is the information-disclosure path; root cause d...

CVE-2022-26857

CVE-2022-26857 affects Dell OpenManage Enterprise, exposing an improper authorization vulnerability in versions 3.8.3 and earlier. A remote attacker with low, authenticated privileges could bypass blocked functionalities and perform unauthorized actions. Connected sources document the issue consi...

CVE-2021-21564

Dell OpenManage Enterprise (pre-3.6.1) contains an improper authentication vulnerability that could allow a remote unauthenticated attacker to hijack an elevated session or perform unauthorized actions by sending malformed data. Affected product: OpenManage Enterprise; affected versions: prior to...

CVE-2024-28978

Dell OpenManage Enterprise (versions 3.10 and 4.0) contains an Improper Access Control vulnerability that could allow a high-privileged remote attacker to access resources. Root cause: incorrect access control in the product. Affected component: Dell OpenManage Enterprise REST/UI surface (per the...

CVE-2024-45766

Dell OpenManage Enterprise (OME) versions 4.1 and earlier are affected by a code generation/Code Injection vulnerability that could allow a low-privileged, remote attacker to achieve code execution. The issue stems from improper controls over code generation and is documented across multiple sour...

CVE-2025-38745

Dell OpenManage Enterprise (versions 3.10, 4.0, 4.1, 4.2) contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore functionality. A low-privileged attacker with remote access could potentially exploit this to cause Information exposure. Connected source...