CVE-2026-91915: Medium severity vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell OpenManage Enterpriseto a version that resolves this vulnerability.Fixed in 4.8.0
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs adjacent network access and high privileges. The issue is not described as exploitable by unauthenticated or low-privileged users.
Which installations are affected?
Dell OpenManage Enterprise versions earlier than 4.8.0 are affected. The provided information does not state whether any particular deployment or configuration is exempt.
What is the potential impact of successful exploitation?
Successful exploitation could lead to script injection. The supplied severity vector indicates potential impacts to confidentiality, integrity, and availability.