CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-33925
https://notcve.org/view.php?id=CVE-2022-33925
10 Aug 2022 — Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authenticated attacker could potentially exploit this vulnerability by bypassing access controls in order to download reports containing sensitive information. Dell Wyse Management Suite versiones 3.6.1 y anteriores, contiene una vulnerabilidad de Control de Acceso Inapropiado en la Interfaz de Usuario. Un atacante remoto autenticado podría explotar esta vulnerabilidad al omitir los controles de acc... • https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities • CWE-284: Improper Access Control •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2022-33924
https://notcve.org/view.php?id=CVE-2022-33924
10 Aug 2022 — Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could potentially exploit this vulnerability and create rules. Dell Wyse Management Suite versiones 3.6.1 y anteriores, contiene una vulnerabilidad de Control de Acceso Inapropiado con la que un atacante sin acceso a la creación de reglas podría explotar potencialmente esta vulnerabilidad y crear reglas • https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities • CWE-284: Improper Access Control •
CVSS: 8.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-29090
https://notcve.org/view.php?id=CVE-2022-29090
10 Aug 2022 — Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions. Dell Wyse Management Suite versiones 3.6.1 y anteriores, contiene una vulnerabilidad de Exposición de Datos Confidenciales. Un usuario malicioso poco privilegiado podría explotar esta vulnerab... • https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities • CWE-312: Cleartext Storage of Sensitive Information CWE-317: Cleartext Storage of Sensitive Information in GUI •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2022-29097
https://notcve.org/view.php?id=CVE-2022-29097
24 Jun 2022 — Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application. Dell WMS versiones 3.6.1 y anteriores, contienen una vulnerabilidad de Salto de Ruta en la API del dispositivo. Un atacante remoto podría explotar esta vulnerabilidad, para conseguir acceso de lectura no autorizado a los archivos almacen... • https://www.dell.com/support/kbdoc/en-us/000200215/dsa-2022-143-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-29096
https://notcve.org/view.php?id=CVE-2022-29096
24 Jun 2022 — Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. Dell Wyse Management Suite versiones 3.6.1 y anteriores, contienen un... • https://www.dell.com/support/kbdoc/en-us/000200215/dsa-2022-143-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23155
https://notcve.org/view.php?id=CVE-2022-23155
01 Apr 2022 — Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious user with admin privileges can exploit this vulnerability in order to execute arbitrary code on the system. Dell Wyse Management Suite versiones 2.0 a 3.5.2 , contienen una vulnerabilidad de carga de archivos sin restricciones. Un usuario malicioso con privilegios de administrador puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el sistema • https://www.dell.com/support/kbdoc/000195918 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2021-36337
https://notcve.org/view.php?id=CVE-2021-36337
21 Dec 2021 — Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity of data. Dell Wyse Management Suite versiones 3.3.1 y anteriores, admiten protocolos de seguridad de transporte TLS versión 1.0 y TLS versión 1.1 no seguros que son susceptibles de ataques de tipo Man-In-The-Middle comprometiendo así la confidencialidad e integridad de los datos • https://www.dell.com/support/kbdoc/000193079 • CWE-326: Inadequate Encryption Strength •
CVSS: 9.8EPSS: 3%CPEs: 1EXPL: 0CVE-2021-36336
https://notcve.org/view.php?id=CVE-2021-36336
21 Dec 2021 — Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system. Wyse Management Suite versiones 3.3.1 y anteriores, contienen una vulnerabilidad de deserialización que podría permitir a un atacante no autenticado ejecutar código en el sistema afectado • https://www.dell.com/support/kbdoc/000193079 • CWE-502: Deserialization of Untrusted Data •
CVSS: 5.3EPSS: 5%CPEs: 1EXPL: 0CVE-2021-21587
https://notcve.org/view.php?id=CVE-2021-21587
15 Jul 2021 — Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this vulnerability in order to obtain the path of files and folders. Dell Wyse Management Suite versiones 3.2 y anteriores contienen una vulnerabilidad de divulgación de ruta completa. Un atacante local no autenticado podría aprovechar esta vulnerabilidad para obtener la ruta de los archivos y carpetas • https://www.dell.com/support/kbdoc/000189363 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.1EPSS: 46%CPEs: 1EXPL: 0CVE-2021-21586
https://notcve.org/view.php?id=CVE-2021-21586
15 Jul 2021 — Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system. Wyse Management Suite versiones 3.2 y anteriores contienen una vulnerabilidad de salto de ruta absoluta. Un usuario malicioso no autenticado remoto podría explotar esta vulnerabilidad para leer archivos arbitrarios en el sistema • https://www.dell.com/support/kbdoc/000189363 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-36: Absolute Path Traversal •