CVE-2019-3722: XML External Entity (XXE) Injection Vulnerability
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially crafted document type definitions (DTDs) in an XML request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3722?
CVE-2019-3722 refers to an XML external entity (XXE) injection vulnerability in Dell EMC OpenManage Server Administrator.
How can an attacker exploit CVE-2019-3722?
A remote unauthenticated attacker could exploit CVE-2019-3722 to read arbitrary server system files by supplying specially crafted XML data.
What is the severity of CVE-2019-3722?
CVE-2019-3722 has a severity score of 7.5 out of 10 (high).
Which versions of Dell EMC OpenManage Server Administrator are affected by CVE-2019-3722?
Dell EMC OpenManage Server Administrator versions prior to 9.1.0.3 and prior to 9.2.0.4 are affected by CVE-2019-3722.
How can I fix the CVE-2019-3722 vulnerability?
To fix the CVE-2019-3722 vulnerability, it is recommended to update to Dell EMC OpenManage Server Administrator version 9.1.0.3 or 9.2.0.4.