CVE-2026-70423
MediumCVSS 6.5Summary
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Risk Assessment
The risk is the exposure of sensitive information, which could compromise data confidentiality and aid attackers in further attacks.
Recommendation
It is recommended to upgrade Dell OpenManage Enterprise to version 4.7.0 or later, which includes a fix for XML entity restriction.
Original NVD description (English source)
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.