{"id":"CVE-2026-111501","title":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability","summary":"Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerabili…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-307"],"vendor":"Dell","product":"OpenManage Enterprise","affected":["openmanage_enterprise < 4.8.0 or later"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-30T14:37:20.427497Z"},"published":"2026-10-30","updated":"2026-10-30","sourceUpdated":"2026-10-30T15:07:32.835Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111501","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000523220/dsa-2026-467-security-update-for-dell-openmanage-enterprise-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9"}],"tags":["cve.org"],"epss":0.00216,"epssPercentile":0.12131,"ingestedAt":"2026-11-05T16:07:30.382Z","slug":"CVE-2026-111501","body":"## Overview\n\nDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Launch of phishing attacks.\n\n## Affected\n\n- `openmanage_enterprise < 4.8.0 or later`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}