Dell Openmanage Enterprise vulnerabilities

22 CVEs affecting Dell Openmanage Enterprise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-71176, published 2026-08-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-54795, published 2026-08-19. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker…
CVE-2021-21585, published 2021-08-09. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially…
CVE-2026-54796, published 2026-08-19. High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker…
CVE-2021-21564, published 2021-08-09. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated…
CVE-2022-26857, published 2022-05-26. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this…
CVE-2021-21584, published 2021-08-09. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenticated low privileged attacker may potentially…
CVE-2024-25944, published 2024-03-29. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to…
CVE-2021-21596, published 2021-08-09. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution vulnerability. A malicious attacker with…
CVE-2024-45766, published 2024-10-17. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A low privileged attacker with remote access could…
CVE-2026-70421, published 2026-08-19. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this…

Latest

CVE-2026-71176, published 2026-08-19. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with…
CVE-2026-54793, published 2026-08-19. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with…
CVE-2026-70424, published 2026-08-19. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote…
CVE-2026-70423, published 2026-08-19. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially…
CVE-2026-70422, published 2026-08-19. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with…
CVE-2026-56088, published 2026-08-19. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with…
CVE-2026-54794, published 2026-08-19. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this…