CVE-2026-71176: SQL Injection
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.7.0
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Dell OpenManage Enterprise deployments running versions earlier than 4.7.0 are affected. Exploitation requires remote access and a low-privileged attacker account.
Is an unauthenticated attacker able to exploit it?
The supplied CVSS vector indicates low privileges are required (PR:L). The available information does not support unauthenticated exploitation.
What is the impact described for successful exploitation?
Successful exploitation could lead to information exposure. The CVSS vector also rates confidentiality, integrity, and availability impact as high.
What should be done to remediate the issue?
Update Dell OpenManage Enterprise to version 4.7.0 or later. The provided data identifies versions prior to 4.7.0 as affected.