Dell Emc Openmanage Server Administrator vulnerabilities

6 CVEs affecting Dell Emc Openmanage Server Administrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-43079, published 2023-10-13.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-5377, published 2020-07-28. Critical severity, CVSS 9.1. EPSS: 48.3% chance of exploitation in the next 30 days. Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these…
• CVE-2019-3722, published 2019-06-06. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could…
• CVE-2019-3720, published 2019-04-25. Medium severity, CVSS 4.9. EPSS: 3.5% chance of exploitation in the next 30 days. Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially…
• CVE-2019-3721, published 2019-04-25. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with…
• CVE-2019-3723, published 2019-06-06. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially…
• CVE-2023-43079, published 2023-10-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this…