Description
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2026-08-19
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Dell OpenManage Enterprise has a Path Traversal flaw (CWE-22) in all releases prior to 4.7.0. The vulnerability enables a low-privileged attacker who can reach the system remotely to manipulate file path references and read files outside the intended directory structure, which can reveal sensitive configuration or internal data.

Affected Systems

Dell OpenManage Enterprise, versions earlier than 4.7.0, is the affected product. All installations of these prior releases are vulnerable.

Risk and Exploitability

The CVSS score of 6.5 indicates a moderate severity. The EPSS score is < 1%, indicating a very low but nonzero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that a remote attacker with limited privileges can exploit the flaw by sending crafted requests to the OpenManage Enterprise web interface or API, potentially gaining information from restricted directories. No other conditions are required according to the description.

Generated by OpenCVE AI on August 20, 2026 at 17:13 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell OpenManage Enterprise update to version 4.7.0 or later as issued in the security advisory.
  • Limit remote management connectivity to trusted IP addresses or VPN ranges to reduce the attack surface.
  • Disable or restrict the vulnerable web API or file access endpoints until the patch is applied, or reconfigure the application to reject relative paths.

Generated by OpenCVE AI on August 20, 2026 at 17:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 21 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:dell:openmanage_enterprise:*:*:*:*:*:*:*:*

Thu, 20 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Dell OpenManage Enterprise Allows Remote Information Exposure

Thu, 20 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 04:00:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Dell OpenManage Enterprise Leading to Information Disclosure

Wed, 19 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Dell OpenManage Enterprise Leading to Information Disclosure
First Time appeared Dell
Dell openmanage Enterprise
Vendors & Products Dell
Dell openmanage Enterprise

Wed, 19 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Description Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Dell Openmanage Enterprise
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-08-20T15:57:10.534Z

Reserved: 2026-08-04T11:16:10.499Z

Link: CVE-2026-70424

cve-icon Vulnrichment

Updated: 2026-08-20T15:52:51.188Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-19T14:17:39.190

Modified: 2026-08-21T17:52:36.973

Link: CVE-2026-70424

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T17:15:04Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')