Dell OpenManage Enterprise, versions earlier than 4.8.0, suffers from improper input validation that can allow a low‑privilege attacker who can reach the management interface over the local network to execute arbitrary code. The flaw permits the attacker to inject malicious input that is inadequately checked before being processed by the system, leading to potential code execution on the host running OpenManage Enterprise. This vulnerability is classified as CWE‑20 and presents a clear threat to confidentiality if an attacker can run arbitrary code.

Affected vendors and products include Dell’s OpenManage Enterprise platform. The specific product is Dell OpenManage Enterprise, with vulnerable releases prior to version 4.8.0. No additional affected versions or variants are listed in the CNA data, so only releases older than 4.8.0 are at risk.

The CVSS score of 8.0 highlights a high severity risk, while the EPSS score is not available and the vulnerability is not yet listed in CISA’s KEV catalog. The flaw is exploitable from the local network by an attacker with limited privileges, meaning that a breach could be achieved without needing elevated user rights. Because the attack requires only adjacent network access, it is relatively easy for a threat actor with physical or virtual proximity to the target system to prepare malicious input, making the overall risk moderately high in environments where OpenManage Enterprise is exposed to untrusted network segments.