Dell EMC OpenManage Server Administrator 9.1.0.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_openmanage_server_administrator:9.1.0.2:*:*:*:*:*:*:*

part: a version: 9.1.0.2 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Openmanage Server Administrator (d5f33286-2b6a-5267-b39c-9b550d43701a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3723 vulnerable 2026-06-08 05:13:55.754253 Web Parameter Tampering Vulnerability
CRITICAL (9.1)
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete the contents of any existing file, due to improper input parameter validation
Published: 2019-06-06T19:14:38.463Z
Updated: 2024-09-16T19:05:23.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3722 vulnerable 2026-06-08 05:13:55.751844 XML External Entity (XXE) Injection Vulnerability
HIGH (7.5)
Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially crafted document type definitions (DTDs) in an XML request.
Published: 2019-06-06T19:13:51.076Z
Updated: 2024-09-16T17:22:35.591Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.