Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an unauthenticated remote attacker to potentially execute actions by tricking a user into submitting a crafted request. The vulnerability has a medium severity rating with a CVSS score of 5.4. A fixed version 11.1.0.3 is available to address this issue.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain a stack-based buffer overflow vulnerability. This flaw allows a high privileged attacker with remote access to potentially execute arbitrary code. The vulnerability is identified as CWE-121 and has a CVSS v3.1 score of 7.2, indicating high severity. No known exploits are reported in the wild. A fixed version 11.1.0.3 or later addresses this issue.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain a vulnerability involving the use of a hard-coded cryptographic key. This flaw could allow an unauthenticated remote attacker to gain unauthorized access. The vulnerability is identified as CWE-321 and has a high severity rating with a CVSS score of 8.1. A fix is available in version 11.1.0.3.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain a heap-based buffer overflow vulnerability. This flaw could be exploited by a high privileged attacker with remote access to execute arbitrary code. The vulnerability is identified as CVE-2026-81477 and has a CVSS v3.1 score of 7.2, indicating high severity. No specific patch link is provided, but versions 11.1.0.3 and later are not affected.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contains an OS Command Injection vulnerability (CWE-78). This flaw allows an unauthenticated remote attacker to execute arbitrary commands on the affected system. The vulnerability has a high severity with a CVSS score of 8.1. Exploitation requires remote network access but no privileges or user interaction. A fix is available in version 11.1.0.3.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contains a vulnerability due to missing authentication for a critical function. This flaw allows an unauthenticated remote attacker to potentially execute code remotely. The vulnerability is identified as CWE-306 and carries a high severity rating with a CVSS score of 8.1. A patch is available in version 11.1.0.3 to address this issue.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain a heap-based buffer overflow vulnerability (CWE-122). This flaw allows a low privileged local attacker to potentially elevate privileges on the affected system. The vulnerability has a high severity with a CVSS score of 7.8. A fix is available in version 11.1.0.3.
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Dell Repository Manager versions prior to 3.5.2 have an incorrect default permissions vulnerability that allows a low privileged remote attacker to potentially elevate privileges. This vulnerability is identified as CWE-276 and has a high severity with a CVSS score of 8.5.
CVE-2026-86358 is a stack-based buffer overflow vulnerability in Dell Update Package Framework versions prior to 26.7.3. It can be exploited by an unauthenticated attacker with adjacent network access, potentially leading to remote execution. The vulnerability has a medium severity rating with a CVSS score of 6.5. No official patch or vendor advisory details are provided in the input data.
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.