PT-2026-78378 · Dell · Openmanage Enterprise
CVE-2026-70423
·
Published
2026-08-19
·
Updated
2026-08-21
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Dell OpenManage Enterprise versions prior to 4.7.0
Description
An Improper Restriction of XML External Entity Reference (XXE) occurs, where the application fails to properly restrict external entity references within XML documents. A low privileged attacker with remote access could exploit this flaw to cause information exposure.
Recommendations
Update Dell OpenManage Enterprise to version 4.7.0 or later.
Fix
XXE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openmanage Enterprise