CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-5320

Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.2%

CVSS Severity

CVSS v3 Score 9.0

CVSS v2 Score 6.5

References

https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities

Products affected by CVE-2020-5320

Dell » Emc Openmanage Enterprise-Modular » Version: Any

cpe:2.3:a:dell:emc_openmanage_enterprise-modular:*
Dell » Emc Openmanage Enterprise » Version: 3.0

cpe:2.3:a:dell:emc_openmanage_enterprise:3.0
Dell » Emc Openmanage Enterprise » Version: 3.1

cpe:2.3:a:dell:emc_openmanage_enterprise:3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5320

Products

Pricing

Contact Us