Wyse Management Suite (Dell) - vulnerabilities (CVEs)

70 CVEs, 0 in the last 30 days, 36 known versions, newest CVE from 2026-09-15. Vendor: Dell.

CVEs of Wyse Management Suite

CVE-2026-81237 - CVSS 6.5 (medium), 2026-09-15: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access…
CVE-2026-81238 - CVSS 9.1 (critical), 2026-09-15: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker…
CVE-2026-81235 - CVSS 8 (high), 2026-09-15: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access…
CVE-2026-81240 - CVSS 9.8 (critical), 2026-09-15: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated…
CVE-2026-81239 - CVSS 9.8 (critical), 2026-09-15: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated…
CVE-2026-81236 - CVSS 9.8 (critical), 2026-09-15: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated…
CVE-2026-63700 - CVSS 7.8 (high), 2026-08-14: Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local…
CVE-2026-66271 - CVSS 7.2 (high), 2026-08-14: Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged…
CVE-2026-66270 - CVSS 7.2 (high), 2026-08-14: Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged…
CVE-2026-66272 - CVSS 5.3 (medium), 2026-08-14: Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated…
CVE-2026-63701 - CVSS 7.8 (high), 2026-08-14: Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker…
CVE-2026-63702 - CVSS 6.3 (medium), 2026-08-14: Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local…
CVE-2026-41120 - CVSS 9.8 (critical), 2026-06-25: Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low…
CVE-2026-49506 - CVSS 7.2 (high), 2026-06-25: Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…
CVE-2026-44271 - CVSS 8.8 (high), 2026-06-22: Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
CVE-2026-44272 - CVSS 8.8 (high), 2026-06-22: Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
CVE-2026-44273 - CVSS 6 (medium), 2026-06-22: Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access…
CVE-2026-44274 - CVSS 7.8 (high), 2026-06-22: Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker…
CVE-2026-23859 - CVSS 2.7 (low), 2026-02-24: Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker…
CVE-2026-23858 - CVSS 5.4 (medium), 2026-02-24: Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
CVE-2026-22765 - CVSS 8.8 (high), 2026-02-24: Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could…
CVE-2026-22766 - CVSS 7.2 (high), 2026-02-24: Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker…
CVE-2025-36577 - CVSS 6.1 (medium), 2025-06-10: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
CVE-2025-36576 - CVSS 2.7 (low), 2025-06-10: Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability. A high privileged attacker with remote…
CVE-2025-36580 - CVSS 6.1 (medium), 2025-06-10: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
CVE-2025-36575 - CVSS 7.5 (high), 2025-06-10: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated…
CVE-2025-36578 - CVSS 6.8 (medium), 2025-06-10: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability. A low privileged attacker with remote access could…
CVE-2025-36574 - CVSS 8.2 (high), 2025-06-10: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could…
CVE-2025-27695 - CVSS 4.9 (medium), 2025-05-08: Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote…
CVE-2025-27694 - CVSS 7.5 (high), 2025-04-02: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access…
CVE-2025-27692 - CVSS 7.2 (high), 2025-04-02: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker…
CVE-2025-27693 - CVSS 4.9 (medium), 2025-04-02: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…
CVE-2025-29982 - CVSS 6.8 (medium), 2025-04-02: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability. A low privileged attacker with local access…
CVE-2025-29981 - CVSS 7.5 (high), 2025-04-02: Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated…
CVE-2024-49596 - CVSS 6.5 (medium), 2024-11-26: Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could…
CVE-2024-49595 - CVSS 7.6 (high), 2024-11-26: Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with…
CVE-2024-49597 - CVSS 7.6 (high), 2024-11-26: Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged…
CVE-2023-32482 - CVSS 4.9 (medium), 2023-07-20: Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push…
CVE-2023-32481 - CVSS 6.5 (medium), 2023-07-20: Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user can flood the configured SMTP server…
CVE-2023-32483 - CVSS 4.4 (medium), 2023-07-20: Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated malicious user having local access to…
CVE-2022-46676 - CVSS 4.9 (medium), 2023-02-11: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration…
CVE-2022-46754 - CVSS 8.7 (high), 2023-02-11: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license…
CVE-2022-46675 - CVSS 5.3 (medium), 2023-02-11: Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attacker could potentially discover the…
CVE-2022-46678 - CVSS 4.9 (medium), 2023-02-11: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for…
CVE-2022-46677 - CVSS 6.8 (medium), 2023-02-11: Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin can create a subgroup under a group for…
CVE-2022-46755 - CVSS 4.9 (medium), 2023-02-11: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for…
CVE-2022-33930 - CVSS 7.5 (high), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could potentially exploit this vulnerability,…
CVE-2022-33929 - CVSS 6.1 (medium), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page. An authenticated attacker could…
CVE-2022-34365 - CVSS 6.5 (medium), 2022-08-10: WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability, to gain unauthorized read access to…
CVE-2022-33931 - CVSS 6.3 (medium), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page…
CVE-2022-33924 - CVSS 5.3 (medium), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could…
CVE-2022-33927 - CVSS 6.5 (medium), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a…
CVE-2022-29090 - CVSS 8.5 (high), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this…
CVE-2022-33926 - CVSS 7.1 (high), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user could exploit this vulnerability in…
CVE-2022-33925 - CVSS 6.5 (medium), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authenticated attacker could potentially exploit…
CVE-2022-33928 - CVSS 8.8 (high), 2022-08-10: Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially…
CVE-2022-29096 - CVSS 6.1 (medium), 2022-06-24: Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker…
CVE-2022-29097 - CVSS 4.9 (medium), 2022-06-24: Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain…
CVE-2022-23155 - CVSS 7.2 (high), 2022-04-01: Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious user with admin privileges can exploit…
CVE-2021-36336 - CVSS 9.8 (critical), 2021-12-21: Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the…
CVE-2021-36337 - CVSS 7.4 (high), 2021-12-21: Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to…
CVE-2021-21587 - CVSS 5.3 (medium), 2021-07-15: Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this…
CVE-2021-21586 - CVSS 8.1 (high), 2021-07-15: Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this…
CVE-2021-21533 - CVSS 4.3 (medium), 2021-04-02: Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status…
CVE-2020-29498 - CVSS 6.1 (medium), 2021-01-04: Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this…
CVE-2020-29497 - CVSS 5.4 (medium), 2021-01-04: Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low…
CVE-2020-29496 - CVSS 4.8 (medium), 2021-01-04: Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high…
CVE-2019-3770 - CVSS 6.4 (medium), 2020-03-13: Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability when unregistering a device. A remote authenticated…
CVE-2019-3769 - CVSS 6.4 (medium), 2020-03-13: Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low…
CVE-2018-11063 - CVSS 7.8 (high), 2018-08-10: Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by…