Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-91915 EUVD-2026-113940GHSA-g6qw-w7c7-fc4f

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream…

Published Oct 30, 2026 · Updated Oct 31, 2026 · Assigned by dell

Description

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection.

Affected products

VendorProductAffectedFixed
Dell OpenManage Enterprise < 4.8.0 or later 4.8.0 or later

References