Dell OpenManage Enterprise suffers a path traversal vulnerability (CWE-22) that allows an attacker with high privileges and adjacent network access to bypass directory restrictions and read or write arbitrary files on the host filesystem. This flaw arises from improper limiting of pathname inputs, enabling exploitation of restricted directories.

The vulnerability affects Dell OpenManage Enterprise versions prior to 4.8.0. Users of earlier builds are vulnerable and must upgrade to a patched release.

The CVSS score of 6.1 indicates a moderate severity. No EPSS score is available, and the issue is not listed in CISA’s KEV catalog, suggesting limited current exploitation data. Nevertheless, the condition requires an attacker to acquire high privilege level from the adjacent network, so the threat is primarily internal or local network-based. Given the potential for critical filesystem compromise, administrators should treat it as a significant risk within organizations that run OpenManage Enterprise.