DELL EMC Open Manage System Administrator vulnerabilities

2 vulnerabilities

Known vulnerabilities in DELL EMC Open Manage System Administrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2019-3720dell emcopen manage system administrator+1
EPSS score
3.45%
Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user with admin privileges could potentially exploit this vulnerability to gain unauthorized access to the file system by exploiting insufficient sanitization of input parameters.7.8CVE-2019-3721dell emcopen manage system administrator+1
EPSS score
2.58%
Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges to cause the application to compress each of the requested bytes, resulting in a crash due to excessive memory consumption and preventing users from accessing the system.