Dell Openmanage Server Administrator vulnerabilities

33 CVEs affecting Dell Openmanage Server Administrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81447, published 2026-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4004, published 2016-04-12. Medium severity, CVSS 4.9. EPSS: 8.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ (dot dot backslash) in the file…
CVE-2021-21513, published 2021-03-02. Critical severity, CVSS 9.8. EPSS: 5.9% chance of exploitation in the next 30 days. Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A…
CVE-2021-21514, published 2021-03-02. Medium severity, CVSS 4.9. EPSS: 5.4% chance of exploitation in the next 30 days. Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view…
CVE-2012-6272, published 2013-01-25. Medium severity, CVSS 4.3. EPSS: 2.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic…
CVE-2012-4955, published 2012-11-15. Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web…
CVE-2013-0740, published 2014-04-10. Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days. Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the…
CVE-2026-81476, published 2026-09-17. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An…
CVE-2026-81480, published 2026-09-17. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this…
CVE-2026-81477, published 2026-09-17. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this…
CVE-2026-56793, published 2026-08-07. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this…

Latest

CVE-2026-81447, published 2026-09-17. Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially…
CVE-2026-81446, published 2026-09-17. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit…
CVE-2026-81445, published 2026-09-17. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this…
CVE-2026-80356, published 2026-09-17. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access…
CVE-2026-81453, published 2026-09-17. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker…
CVE-2026-81443, published 2026-09-17. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit…
CVE-2026-81442, published 2026-09-17. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this…
CVE-2026-80355, published 2026-09-17. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit…
CVE-2026-81481, published 2026-09-17. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker…