← Back

CVE-2026-54794

nvd nist
Published: Aug 19, 2026Modified: Aug 21, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Exploitability: 3.9 / Impact: 2.7
Source: security_alert@emc.com (Secondary)

Description

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Affected (1)

Dell
1 product
Openmanage Enterprise
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openmanage Enterprise
Before 4.7.0

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

Source: security_alert@emc.com
Vendor AdvisoryPatch

Timeline

No history available yet.