CVE-2026-54793
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Dell OpenManage Enterprise versions prior to 4.7.0 contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Risk Assessment
An attacker could inject malicious scripts into pages viewed by other users, potentially leading to session theft, data disclosure, or other attacks.
Recommendation
Update Dell OpenManage Enterprise to version 4.7.0 or later, which includes fixes for the XSS vulnerability. Additionally, apply input filtering and encoding mechanisms.
Other vulnerabilities in Dell OpenManage Enterprise
See all- CVE-2026-71176High
Dell OpenManage Enterprise versions prior to 4.7.0 contain an SQL injection vulnerability. A low privileged attacker with remote access could exploit this, leading to information exposure.
- CVE-2026-70424Medium
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
- CVE-2026-70423Medium
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
- CVE-2026-70422High
Dell OpenManage Enterprise versions prior to 4.7.0 contain an SQL injection vulnerability. A low-privileged attacker with remote access could exploit it, leading to script injection.
- CVE-2026-70421High
Dell OpenManage Enterprise versions prior to 4.7.0 contain an improper privilege management vulnerability. A high-privileged attacker with remote access could exploit it to elevate privileges.
- CVE-2026-56088High
Dell OpenManage Enterprise versions prior to 4.7.0 contain an SQL injection vulnerability. A low-privileged attacker with remote access could exploit it, leading to script injection.
- CVE-2026-54796High
Dell OpenManage Enterprise versions prior to 4.7.0 contain an OS command injection vulnerability. A high-privileged attacker with remote access could exploit it to execute commands.
- CVE-2026-54795High
Dell OpenManage Enterprise versions prior to 4.7.0 contain an OS command injection vulnerability. A low-privileged attacker with remote access could exploit it to execute commands.
- CVE-2026-54794High
Dell OpenManage Enterprise versions prior to 4.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could exploit it, leading to information exposure.
Original NVD description (English source)
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

