CVE-2026-111500: Medium severity vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Server-side request forgery.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. Exploitation requires adjacent network access, so exposure is limited to attackers able to reach the appliance from the adjacent network.
Does exploitation require an authenticated OpenManage Enterprise account?
No. The vulnerability is described as missing authentication for a critical function, and an unauthenticated attacker could potentially exploit it.
What is the potential impact of successful exploitation?
Successful exploitation could lead to server-side request forgery. The supplied severity vector indicates potential integrity and availability impact, with no stated confidentiality impact.
What version addresses the vulnerability?
Upgrade Dell OpenManage Enterprise to version 4.8.0 or later. The affected range is versions prior to 4.8.0.