← Back to browse · API

CVE-2020-5377

Severity
CRITICAL
CVSS
9.1
EPSS
0.48332
Risk score
53.32
CISA KEV
No
PoC
No
Published
2020-07-28
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2020-26559, GHSA-JCX7-MQQF-7JXJ
Products
Dell:Dell Open Manage Server Administrator unspecified <9.5
Sources
euvd EUVD-2020-26559

Description

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

References