CVE-2024-28979: Dell Openmanage Enterprise

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected products

• Dell Openmanage Enterprise: before 4.1.0 (fixed in 4.1.0)

Published 2024-05-01. Last modified 2026-06-17.