CVE-2024-25944

CVE-2024-25944 affects Dell OpenManage Enterprise (Dell OpenManage Enterprise, v4.0 and prior). A path traversal vulnerability allows an unauthenticated attacker to access files on the server filesystem with the web application’s privileges. Connected sources confirm versions 4.0 and earlier are ...

CVE-2021-21596

Dell OpenManage Enterprise (3.4–3.6.1) and OpenManage Enterprise Modular (1.20.00–1.30.00) contain a remote code execution vulnerability (CVE-2021-21596) that can lead to information disclosure and privilege elevation when an attacker on the same subnet can exploit exposed services. Several conne...

CVE-2024-28979

Dell OpenManage Enterprise (Dell EMC) before 4.1.0 is affected by an improper neutralization of input during web page generation (Cross-site Scripting). The vulnerability arises from insufficient input filtering/escaping in the web UI, enabling a high-privilege remote attacker to inject scripts v...

CVE-2024-28961

Dell OpenManage Enterprise vulnerable in versions 4.0.0 and 4.0.1 to a sensitive information disclosure that could let a local, low-privileged attacker obtain credentials and gain elevated access. The publicly documented description does not specify the exact root cause or exploit details in thes...

CVE-2024-45767

Dell OpenManage Enterprise (OME) before 4.2.0 contains an SQL injection vulnerability due to improper neutralization of special elements in SQL commands. A low-privilege, remote attacker could cause information disclosure. Publicly documented in CVE-2024-45767 and corroborated by NVD/CVEC/Vuln en...

CVE-2021-21584

Dell OpenManage Enterprise 3.5 and OpenManage Enterprise-Modular 1.30.00 are affected by an information disclosure vulnerability allowing an authenticated, low-privilege attacker to potentially exfiltrate OIDC server credentials. Affected component is the information-disclosure path; root cause d...

CVE-2021-21585

CVE-2021-21585 affects Dell OpenManage Enterprise (prior to 3.6.1). The vulnerability is an OS command injection in the RACADM and IPMI tools. An authenticated remote attacker with high privileges could potentially exploit this flaw to execute arbitrary OS commands on affected systems. The issue ...

CVE-2022-26857

CVE-2022-26857 affects Dell OpenManage Enterprise, exposing an improper authorization vulnerability in versions 3.8.3 and earlier. A remote attacker with low, authenticated privileges could bypass blocked functionalities and perform unauthorized actions. Connected sources document the issue consi...

CVE-2024-45766

Dell OpenManage Enterprise (OME) versions 4.1 and earlier are affected by a code generation/Code Injection vulnerability that could allow a low-privileged, remote attacker to achieve code execution. The issue stems from improper controls over code generation and is documented across multiple sour...

CVE-2021-21564

Dell OpenManage Enterprise (pre-3.6.1) contains an improper authentication vulnerability that could allow a remote unauthenticated attacker to hijack an elevated session or perform unauthorized actions by sending malformed data. Affected product: OpenManage Enterprise; affected versions: prior to...

CVE-2024-28978

Dell OpenManage Enterprise (versions 3.10 and 4.0) contains an Improper Access Control vulnerability that could allow a high-privileged remote attacker to access resources. Root cause: incorrect access control in the product. Affected component: Dell OpenManage Enterprise REST/UI surface (per the...

CVE-2025-38745

Dell OpenManage Enterprise (versions 3.10, 4.0, 4.1, 4.2) contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore functionality. A low-privileged attacker with remote access could potentially exploit this to cause Information exposure. Connected source...

CVE-2026-54795

Dell OpenManage Enterprise versions prior to 4.7.0 have an OS Command Injection flaw; a low-privileged remote attacker can inject special characters into input to execute arbitrary commands. Dell's DSA-2026-359 advisory recommends updating to 4.7.0 or later. No exploitation details are provided i...

CVE-2026-54794

Dell OpenManage Enterprise versions before 4.7.0 contain an unauthenticated, network-accessible SSRF vulnerability (CVSS 7.2 HIGH) enabling information exposure; no in-the-wild exploitation is reported. Remediation is to upgrade to version 4.7.0 or later as documented in Dell DSA-2026-359.

CVE-2026-56088

Dell OpenManage Enterprise versions before 4.7.0 contain an SQL injection vulnerability exploitable by a low-privileged remote attacker, with HIGH confidentiality impact (CVSS 7.1). Upgrade to 4.7.0 or apply Dell's DSA-2026-359 security update. No in-the-wild exploitation reported in the provided...

CVE-2026-70421

Dell OpenManage Enterprise versions prior to 4.7.0 contain an Improper Privilege Management vulnerability exploitable by a high-privileged remote attacker for privilege escalation. CVSS 3.1 base score is 7.2 (HIGH). Patch to 4.7.0; see Dell DSA-2026-359 advisory. No public exploitation evidence p...

CVE-2026-70423

Dell OpenManage Enterprise versions before 4.7.0 suffer from an XML External Entity (XXE) vulnerability exploitable by a low-privileged remote attacker, causing information exposure (CVSS 6.5, MEDIUM). Dell's DSA-2026-359 security advisory provides patch guidance for remediation. No in-the-wild e...

CVE-2026-54793

Dell OpenManage Enterprise versions prior to 4.7.0 contain a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. A low-privileged remote attacker could exploit this with user interaction to achieve information exposure . The CVSS v3.1 sc...

CVE-2026-70422

Dell OpenManage Enterprise versions prior to 4.7.0 contain a SQL Injection vulnerability (CWE-89). A low-privileged attacker with remote network access can exploit this to achieve script injection , resulting in high confidentiality and availability impact (CVSS 3.1: 8.1 HIGH ). CISA's SSVC asses...

CVE-2026-70424

Dell OpenManage Enterprise versions prior to 4.7.0 contain a Path Traversal vulnerability (Improper Limitation of a Pathname to a Restricted Directory). A low-privileged attacker with remote access can exploit this to achieve information exposure , with no user interaction required. The CVSS 3.1 ...

CVE-2026-71176

Dell OpenManage Enterprise versions prior to 4.7.0 have an SQL injection flaw exploitable by a low-privileged remote attacker, potentially exposing sensitive information. Dell has released DSA-2026-359 as the security update; affected deployments should upgrade to version 4.7.0 or later. No in-th...

CVE-2026-54796

Dell OpenManage Enterprise versions prior to 4.7.0 contain an OS Command Injection flaw (CWE-78) exploitable by a high-privileged remote attacker, leading to full command execution and HIGH confidentiality, integrity, and availability impact. Dell DSA-2026-359 provides the fix; upgrade to 4.7.0 o...