Description
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially crafted document type definitions (DTDs) in an XML request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell EMC | OpenManage Server Administrator | 9.1.0.3 – < 9.1.0.3, 9.3.0.4 – < 9.3.0.4 | 9.1.0.3 |