DELL EMC Openmanage Server Administrator vulnerabilities
2 vulnerabilities
Known vulnerabilities in DELL EMC Openmanage Server Administrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-3723dell emcopenmanage server administrator+1
EPSS score1.85%
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validationCVE-2019-3722dell emcopenmanage server administrator+1EPSS score3.78%
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially crafted document type definitions (DTDs) in an XML request.