Vulnerability Details CVE-2021-21514
Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.128
EPSS Ranking 93.6%
CVSS Severity
CVSS v3 Score 4.9
CVSS v2 Score 4.0
Products affected by CVE-2021-21514
-
cpe:2.3:a:dell:openmanage_server_administrator:-
-
cpe:2.3:a:dell:openmanage_server_administrator:1.00.0000
-
cpe:2.3:a:dell:openmanage_server_administrator:4.3.0
-
cpe:2.3:a:dell:openmanage_server_administrator:4.4.0
-
cpe:2.3:a:dell:openmanage_server_administrator:4.5.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.0.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.1.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.1.0.1
-
cpe:2.3:a:dell:openmanage_server_administrator:5.2.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.3.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.4.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.5.0
-
cpe:2.3:a:dell:openmanage_server_administrator:5.5.0.1
-
cpe:2.3:a:dell:openmanage_server_administrator:6.2.0
-
cpe:2.3:a:dell:openmanage_server_administrator:6.3.0
-
cpe:2.3:a:dell:openmanage_server_administrator:6.4.0
-
cpe:2.3:a:dell:openmanage_server_administrator:6.5.0
-
cpe:2.3:a:dell:openmanage_server_administrator:6.5.0.1
-
cpe:2.3:a:dell:openmanage_server_administrator:7.0.0
-
cpe:2.3:a:dell:openmanage_server_administrator:7.0.0.1
-
cpe:2.3:a:dell:openmanage_server_administrator:7.1.0
-
cpe:2.3:a:dell:openmanage_server_administrator:7.1.0.1
-
cpe:2.3:a:dell:openmanage_server_administrator:7.2.0
-
cpe:2.3:a:dell:openmanage_server_administrator:7.3.0
-
cpe:2.3:a:dell:openmanage_server_administrator:8.2
-
cpe:2.3:a:dell:openmanage_server_administrator:9.4.0.3