CVE-2024-45760

Dell OpenManage Server Administrator (Dell OMSA) — affected: version 11.0.1.0 and prior. Vulnerability: improper access control allowing a remote, low-privilege user to perform unauthorized actions with elevated privileges via HTTP GET. Impact per sources: potential elevation of privilege; no exp...

CVE-2026-56793

CVE-2026-56793 affects Dell OpenManage Server Administrator, versions prior to 11.1.0.2. The issue is an improper authentication vulnerability allowing an unauthenticated attacker with remote access to obtain unauthorized access. The NVD and related records confirm the affected product and vulner...

CVE-2024-37130

CVE-2024-37130 (Dell OpenManage Server Administrator) is a Local Privilege Escalation via XSL Hijacking . Affected: Dell OpenManage Server Administrator versions 11.0.1.0 and prior . Root cause: an XSL hijack path enabling a local, low-privileged user to escalate to the admin user, potentially le...

CVE-2021-21513

Dell EMC OpenManage Server Administrator (OMSA) 9.5 on Windows with Distributed Web Server (DWS) enabled contains an authentication bypass vulnerability that could allow a remote unauthenticated attacker to gain administrator access. Root cause details are not provided beyond the bypass descripti...

CVE-2024-45761

Dell OpenManage Server Administrator (OMSA)

CVE-2026-56794

CVE-2026-56794 affects Dell OpenManage Server Administrator, prior to version 11.1.0.2. It is a Relative Path Traversal vulnerability that could be exploited by a low-privileged attacker with remote network access to gain filesystem access. The provided metrics assign a CVSS v3.1 base score of 6....

CVE-2013-0740

Dell OpenManage Server Administrator (OMSA) prior to 7.3.0 contains an open redirect vulnerability in HelpViewer where an attacker can use a URL in the file parameter to redirect users to arbitrary sites and enable phishing. Affected product/version: OMSA

CVE-2012-6272

Dell OpenManage Server Administrator (OMSA) versions 6.5.0.1, 7.0.0.1, and 7.1.0.1 contain DOM-based/URL-based XSS via the topic parameter to html/index_main.htm across multiple help paths (e.g., help/sm/en/Output/wwhelp/wwhimpl/js/ and related locales). The vulnerability allows remote attackers ...

CVE-2016-4004

Dell OpenManage Server Administrator (OMSA) is affected by CVE-2016-4004 (directory traversal via the file parameter to /ViewFile). Multiple sources confirm that authenticated admins could read arbitrary files; versions 8.2 (and affected 7.x/8.x) are implicated, with a patch referenced for 8.5. I...

CVE-2022-34396

Dell OpenManage Server Administrator (OMSA) 10.3.0.0 and earlier contains a DLL Injection vulnerability that lets a local, authenticated, low-privilege attacker execute arbitrary code with elevated privileges, potentially compromising the system. Affected component: OMSA DLL injection in the Dell...

CVE-2012-4955

Dell OpenManage Server Administrator (OMSA) prior to 6.5.0.1, 7.0 prior to 7.0.0.1, and 7.1 prior to 7.1.0.1 contains a cross-site scripting (XSS) vulnerability. The Nessus entry specifies DOM-based XSS in omalogin.html and mentions a related vector in omatasks.html, enabling remote attackers to ...

CVE-2021-21514

Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and earlier are affected by a path traversal vulnerability that allows a remote attacker with administrator privileges to view arbitrary files via a specially crafted URL request. This is due to a flaw in OMSA prior to 9.5, as detailed ...