CVE-2026-70422
HighCVSS 8.1Summary
Dell OpenManage Enterprise versions prior to 4.7.0 contain an SQL injection vulnerability. A low-privileged attacker with remote access could exploit it, leading to script injection.
Risk Assessment
The risk includes unauthorized script execution within the application context, potentially leading to data integrity compromise or further privilege escalation.
Recommendation
Immediately upgrade Dell OpenManage Enterprise to version 4.7.0 or later and restrict remote access for low-privileged users.
Original NVD description (English source)
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.