Dell Openmanage Network Manager vulnerabilities

2 CVEs affecting Dell Openmanage Network Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15768, published 2018-11-30.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15767, published 2018-11-30. High severity, CVSS 8.8. EPSS: 12.3% chance of exploitation in the next 30 days. The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file.
• CVE-2018-15768, published 2018-11-30. Medium severity, CVSS 6.5. EPSS: 9.1% chance of exploitation in the next 30 days. Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.