Dell OpenManage Enterprise versions prior to 4.8.0 contain a flaw where special characters in user input are not properly escaped before being passed to an operating‑system command, causing OS command injection. An attacker with minimal privileges who can reach the exposed interface can supply crafted input that the application accepts, leading to execution of arbitrary shell commands on the host. The consequence is full compromise of confidentiality, integrity and availability of the affected system.

The vulnerability impacts all Dell OpenManage Enterprise releases before 4.8.0. No finer‑grained sub‑versions are listed; therefore any installation with a version number older than 4.8.0 is considered at risk.

The CVSS score of 8.8 indicates high severity. The EPSS score is not available, providing no current estimate of exploitation probability. The flaw is not listed in the CISA KEV catalog. The attack requires remote access with low privileges, suggesting that an intruder who can log in or otherwise reach a network endpoint could exploit the flaw to run arbitrary commands on the target host. Such exploitation would give the attacker full control over the affected system.