Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks with elevated privileges.
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsPresent
PrivilegesHigh
User InteractionNone
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityNone
IntegrityLow
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Change Log
| Date | Source | Changes | Score |
|---|
| 2026-07-21 | cve.org | initial, patch: Unavailable | 2.1 |
Affected Software
| Vendor | Product | Version |
|---|
| Dell | Dell OpenManage Enterprise | < 3.20 |
| dell | emc_openmanage_enterprise | < 3.2 |
| dell | emc_openmanage_enterprise-modular | < 1.10.00 |
Published: 2021-07-19
