Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Metrics
Affected Vendors & Products
References
History
Mon, 02 Dec 2024 15:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:dell:openmanage_enterprise:*:*:*:*:*:*:*:* |
Thu, 17 Oct 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Dell
Dell openmanage Enterprise |
|
CPEs | cpe:2.3:a:dell:openmanage_enterprise:-:*:*:*:*:*:*:* | |
Vendors & Products |
Dell
Dell openmanage Enterprise |
|
Metrics |
ssvc
|
Thu, 17 Oct 2024 02:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. | |
Weaknesses | CWE-89 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: dell
Published: 2024-10-17T02:05:22.223Z
Updated: 2024-10-17T20:30:26.595Z
Reserved: 2024-09-06T06:30:30.481Z
Link: CVE-2024-45767
Vulnrichment
Updated: 2024-10-17T20:30:18.763Z
NVD
Status : Analyzed
Published: 2024-10-17T02:15:02.587
Modified: 2024-12-02T14:32:37.183
Link: CVE-2024-45767
Redhat
No data.