Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-45767 EUVD-2024-41590GHSA-rc48-r6qm-2vg9

Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command …

Published Oct 17, 2024 · Updated Oct 17, 2024 · Assigned by dell

Description

Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Affected products

VendorProductAffectedFixed
Dell Dell OpenManage Enterprise N/A – < 4.2.0 4.2.0

References