Dell OpenManage Enterprise: SQL injection exposes console data to a low-privileged user

Impact

A low-privileged remote user can inject SQL into the OpenManage Enterprise database layer. Dell describes the outcome as information exposure but scores integrity high, so the injected statements are not read-only - a user who should only view inventory can reach and alter the console's own records. That database is the inventory, group membership, baseline and job state for the managed estate, which is what drives firmware pushes and power actions against servers. Dell does not name the vulnerable query.

Who can reach it

Network access to the OME console with any valid low-privileged account. Authentication required.

What to do

Upgrade to OpenManage Enterprise 4.8.0 (DSA-2026-467). Appliance update and console restart only. If low-privileged console accounts are widely issued, review console audit logs for unexpected inventory or baseline changes.

References

Related entries

• Dell OpenManage Enterprise: authenticated SQL injection exposes management database contentsCVE-2026-71176 · Dell OpenManage Enterprise (SQL injection)High
• Arista EOS: crafted DHCP packet restarts the DHCP relay service on client-facing VLANsCVE-2026-19655 · Arista EOS DHCP relay (Option 82 information option handling)High
• Cisco UCS UEFI Shell: memory write commands bypass Secure Boot validationCVE-2026-20293 · Cisco UCS server BIOS (UEFI Shell)High
• Linux bnxt_en driver (DBG_BUF_PRODUCER async event handler): The async-event handler indexes a fixed arrayCVE-2026-31395 · Linux bnxt_en driver (DBG_BUF_PRODUCER async event handler)High
• Linux kernel PMBus hwmon: unlocked regulator voltage operations race with fault notificationsCVE-2026-31486 · Linux kernel hwmon PMBus core (regulator get/set/list_voltage locking)High
• Junos OS and Junos OS Evolved: a genuine BGP packet resets an established session, sustaining a DoSCVE-2026-33797 · Juniper Junos OS / Junos OS Evolved (BGP packet handling)High