CVE Catalog
CVE-2026-71176
HighCVSS 8.8Summary
Dell OpenManage Enterprise versions prior to 4.7.0 contain an SQL injection vulnerability. A low privileged attacker with remote access could exploit this, leading to information exposure.
Risk Assessment
The risk involves potential disclosure of sensitive data stored in the system's database, which could compromise the confidentiality of organizational information.
Recommendation
It is recommended to update Dell OpenManage Enterprise to version 4.7.0 or later, which includes the fix.
Original NVD description (English source)
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.