Description
Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to XML injection, malicious content injection, and XML parsing errors
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | OpenManage Ansible Modules | < 11.0.0 or later | 11.0.0 or later |