Dell OpenManage Enterprise prior to version 4.8.0 has a cross‑site scripting flaw that occurs when the system does not properly neutralize user input during web page generation. This vulnerability allows an unauthenticated attacker with remote access to inject malicious scripts into the web interface, potentially altering displayed information. The impact is the tampering of data presented to users, which can mislead or manipulate end‑users and compromise the integrity of the system’s information.

Dell OpenManage Enterprise before version 4.8.0 is affected. The vulnerability resides in the web management interface of the Dell OpenManage Enterprise product, as identified by the vendor in its security advisory.

The CVSS score of 6.8 indicates a moderate severity. Because the EPSS score is not provided, the likelihood of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog, suggesting it has not yet been observed in the wild. However, the attack vector is remote and does not require authentication, so an attacker with remote network access could exploit the flaw by sending crafted input to the web interface. Successful exploitation would allow the attacker to modify displayed content, leading to information tampering.