CVE-2026-54793
MediumCVSS 4.6Summary
Dell OpenManage Enterprise versions prior to 4.7.0 contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Risk Assessment
An attacker could inject malicious scripts into pages viewed by other users, potentially leading to session theft, data disclosure, or other attacks.
Recommendation
Update Dell OpenManage Enterprise to version 4.7.0 or later, which includes fixes for the XSS vulnerability. Additionally, apply input filtering and encoding mechanisms.
Original NVD description (English source)
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.