Summary
Ein Angreifer kann mehrere Schwachstellen in Dell OpenManage Server Administrator ausnutzen, um Sicherheitsmechanismen zu umgehen, Daten offenzulegen oder zu manipulieren, SSRF- und Denial-of-Service-Angriffe durchzuführen, Berechtigungen zu erweitern und beliebigen Code auszuführen.
Product
OpenManage Server Administrator (OMSA) ist eine Systemverwaltungslösung für Dell Server.
Vulnerabilities 21
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerabili…
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Functi…
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elemen…
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulner…
-
High 7.8
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. …
-
High 7.5
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Re…
-
High 7.4
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnera…
-
High 7.3
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Sele…
-
High 7.3
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an U…
-
High 7.3
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerabilit…
-
High 7.2
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerabili…
-
High 7.2
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. …
-
High 7.2
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability.…
-
Medium 6.8
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerabi…
-
Medium 6.5
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Re…
-
Medium 6.4
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnera…
-
Medium 5.8
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A…
-
Medium 5.4
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerab…
-
Medium 4.0
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Functi…
-
Low 3.7
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algor…
-
Low 3.7
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A …
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-81430, EUVD-2026-81429, EUVD-2026-81427, EUVD-2026-81426, EUVD-2026-81425, EUVD-2026-81433, EUVD-2026-81572, EUVD-2026-81461, EUVD-2026-81618, EUVD-2026-81615, EUVD-2026-81614, EUVD-2026-81465, EUVD-2026-81440, EUVD-2026-81578, EUVD-2026-81432, EUVD-2026-81458, EUVD-2026-81459, EUVD-2026-81671, EUVD-2026-81664, EUVD-2026-81666, EUVD-2026-81627
-
#1
Initiale Fassung
References
-
Dell Security Advisory dsa-2026-403 vom 2026-09-08
https://www.dell.com/support/kbdoc/de-de/000506586/dsa-2026-403-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilitiesv