Dell OpenManage Enterprise versions prior to 4.8.0 contain a missing authentication for critical function vulnerability that can be exploited by an unauthenticated attacker with adjacent network access. The flaw permits the attacker to cause the server to initiate requests to internal or external addresses, resulting in server‑side request forgery. This can expose sensitive data or allow further internal compromise. The weakness is classified as CWE-306.

Affected systems are Dell OpenManage Enterprise deployments running any version older than 4.8.0. No other product versions are listed as impacted.

The CVSS score of 5.4 marks the vulnerability as moderate in severity, but the EPSS score is not provided, offering no clear indication of current exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known active exploitation. The likely attack vector requires the attacker to have network proximity to the OpenManage Enterprise instance, typically on an adjacent or local network segment.