CVE-2026-70422 - Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability

Back Back to CVE browser

HIGH

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability

Published Aug 19, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.44%

Description

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected products

Vendor Dell Product OpenManage Enterprise Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <4.7.0 or later

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

OpenManage Enterprise

unaffected

Version	Status	Constraints
0	affected	<4.7.0 or later

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62439
Advisory
https://www.dell.com/support/kbdoc/en-us/000500910/dsa-2026-359-security-update-for-dell-openmanage-enterprise-vulnerabilities
vendor-advisoryVendor AdvisoryPatch

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62439		Advisory
https://www.dell.com/support/kbdoc/en-us/000500910/dsa-2026-359-security-update-for-dell-openmanage-enterprise-vulnerabilities		vendor-advisoryVendor AdvisoryPatch