Vulnerabilities

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Dell Technologies

Product

OpenManage Enterprise

CVSS v3.1

6.8 AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-74

Exposure class

Storage / NAS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-91915 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 21
   CVE NVD 47h ago

   Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command…

   CVSS 8.8 CVE-2026-91913 Dell Technologies