{"id":"CVE-2026-91907","kind":"vulnerability","aliases":["CVE-2026-91907"],"related":[],"title":"Dell OpenManage Enterprise: cross-site scripting lets remote attackers tamper with information","description":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain a cross-site scripting flaw in their web interface. A remote attacker without an account could exploit it to tamper with information shown or stored by the console.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","openmanage-enterprise","self-hosted"],"not_affected_if":["version-4.8.0-or-later"],"how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; versions below `4.8.0` are listed as affected.","fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later (per the source's stated fixed version).","status":"open","published_at":"2026-11-02T13:17:40+00:00","first_seen_at":"2026-11-02T13:23:16+00:00","triaged_at":"2026-11-02T13:24:49+00:00","updated_at":"2026-11-02T13:24:49+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-02T13:24:49Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Enterprise: move to `4.8.0` or later (per the source's stated fixed version).","reach":"network","title":"Dell OpenManage Enterprise: cross-site scripting lets remote attackers tamper with information","impact":"medium","summary":"Dell OpenManage Enterprise versions before 4.8.0 contain a cross-site scripting flaw in their web interface. A remote attacker without an account could exploit it to tamper with information shown or stored by the console.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage-enterprise","self-hosted"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"attacker tampers with information shown in the management console","analyst_note":"Confirm the exact attack path and whether user interaction is needed; check the Dell security advisory for the affected version range and fixed version.","how_to_check":"- Check the installed OpenManage Enterprise version in the web console or on the appliance; versions below `4.8.0` are listed as affected.\n- unknown for any other check, the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["version-4.8.0-or-later"],"who_is_affected":"Organisations that run Dell OpenManage Enterprise for managing Dell servers and hardware, on versions before 4.8.0 and reachable over the network. The sources do not say which deployment settings make it exposed, and do not describe the exact attack path.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000693,"input_tokens":4136,"output_tokens":559,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-91907':16A,19A '4.8.0':33B,70C 'access':91C 'account':50B 'attack':10A,47B,88C 'consol':63B 'contain':34B,71C 'could':51B,92C 'cross':5A,37B,82C 'cross-sit':4A,36B,81C 'cve':14A,17A 'dell':1A,20B,28B,64C 'enterpris':3A,24B,30B,66C 'exploit':52B,94C 'flaw':40B 'generat':80C 'host':27B 'improp':73C 'inform':13A,57B,99C 'infrastructur':21B 'input':76C 'interfac':44B 'lead':97C 'let':8A 'neutral':74C 'openmanag':2A,23B,29B,65C 'openmanage-enterpris':22B 'page':79C 'potenti':93C 'prior':68C 'remot':9A,46B,90C 'script':7A,39B,84C 'self':26B 'self-host':25B 'shown':58B 'site':6A,38B,83C 'store':60B 'tamper':11A,55B,100C 'unauthent':87C 'version':31B,67C 'vulner':85C,96C 'web':43B,78C 'without':48B","nicknames":[],"mitigations":[],"who_affected":"Organisations that run Dell OpenManage Enterprise for managing Dell servers and hardware, on versions before 4.8.0 and reachable over the network. The sources do not say which deployment settings make it exposed, and do not describe the exact attack path.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","infrastructure","medium","openmanageenterprise","selfhosted"],"first_public_at":"2026-11-02T13:17:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91907","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91907","severity":null,"published_at":"2026-11-02T13:17:40+00:00","modified_at":"2026-11-02T13:17:40+00:00","first_seen_at":"2026-11-02T13:23:16+00:00","fetched_at":"2026-11-02T13:23:16+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}