5.1
Medium
CVE-2024-28979 Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page…
Description
Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell OpenManage Enterprise 4.1 | earliest → < 4.1.0 | 4.1.0 |
Other CVEs of Dell OpenManage Enterprise
The 12 CVEs of Dell OpenManage Enterprise →
CVE-2024-45767
Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used…
4.3
Medium
CVE-2024-45766
Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code…
8.0
High
CVE-2024-28978
Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability
5.2
Medium
CVE-2024-28961
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability
6.3
Medium