Dell Openmanage Enterprise — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Openmanage Enterprise, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2021-21564 — CVSS 9.8 (critical): Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may…
• CVE-2021-21596 — CVSS 9.6 (critical): Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a…
• CVE-2021-21585 — CVSS 9.1 (critical): Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote…
• CVE-2022-26857 — CVSS 9.0 (critical): Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user…
• CVE-2024-45766 — CVSS 8.0 (high): Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection')…
• CVE-2021-21584 — CVSS 7.7 (high): Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability…
• CVE-2024-28961 — CVSS 6.3 (medium): Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged…
• CVE-2024-25944 — CVSS 5.7 (medium): Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially…
• CVE-2024-28978 — CVSS 5.2 (medium): Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged remote attacker…
• CVE-2024-28979 — CVSS 5.1 (medium): Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site…
• CVE-2025-38745 — CVSS 4.8 (medium): Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in…
• CVE-2024-45767 — CVSS 4.3 (medium): Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command…