Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Filtered by product Emc Openmanage Server Administrator
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-5377 1 Dell 1 Emc Openmanage Server Administrator 2022-01-01 6.4 MEDIUM 9.1 CRITICAL
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.
CVE-2019-3723 1 Dell 1 Emc Openmanage Server Administrator 2019-10-09 6.4 MEDIUM 9.1 CRITICAL
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validation