Wyse Management Suite vulnerabilities
26 known vulnerabilities in Wyse Management Suite from Dell. 26 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Wyse Management Suite: Improper Neutralization of Input During Web Page Generation
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability
- 9.0 Critical severity
Wyse Management Suite: Improper Neutralization of Input During Web Page Generation
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability
- 9.8 Critical severity
Wyse Management Suite: Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- 9.8 Critical severity
Wyse Management Suite: Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- 9.1 Critical severity
Wyse Management Suite: Missing Authentication for Critical Functionality
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- 9.8 Critical severity
Wyse Management Suite: Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- 7.2 High severity
Wyse Management Suite (WMS): Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution
- 7.2 High severity
Wyse Management Suite (WMS): Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution
- 7.8 High severity
Wyse Management Suite (WMS): Improper Privilege Management
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
- 7.8 High severity
Wyse Management Suite (WMS): Improper Privilege Management
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
- 7.2 High severity
Wyse Management Suite: Improper Limitation of a Pathname to a Restricted Directory
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, lead
- 9.8 Critical severity
Wyse Management Suite: Acceptance of Extraneous Untrusted Data With Trusted Data
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Exe
- 7.8 High severity
Wyse Management Suite (WMS): Improper Link Resolution Before File Access
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
- 8.8 High severity
Wyse Management Suite (WMS): Improper Neutralization of Special Elements used in an SQL Command
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerabili
- 8.8 High severity
Wyse Management Suite (WMS): Improper Neutralization of Special Elements used in an SQL Command
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerabili
- 7.2 High severity
Wyse Management Suite: Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- 8.8 High severity
Wyse Management Suite: Missing Authorization
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
- 7.5 High severity
Wyse Management Suite: Exposure of Sensitive Information Through Data Queries
Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosu
- 8.2 High severity
Wyse Management Suite: Absolute Path Traversal
Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.
- 7.5 High severity
Wyse Management Suite: Exposure of Sensitive Information Through Data Queries
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclos
- 7.5 High severity
Wyse Management Suite: Insufficient Resource Pool
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
- 7.2 High severity
Wyse Management Suite Repository: Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Informat
- 7.2 High severity
Wyse Management Suite: Improper Restriction of Excessive Authentication Attempts
Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechan
- 7.5 High severity
Wyse Management Suite: Generation of Error Message Containing Sensitive Information
Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could potentially exploit this vulnerability, leading to the disclosure of certain sensitive information. The attacker may be able to use the exposed
- 8.8 High severity
Wyse Management Suite: Cleartext Storage of Sensitive Information
Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be abl
- 7.2 High severity
Wyse Management Suite: Unrestricted Upload of File with Dangerous Type
Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious user with admin privileges can exploit this vulnerability in order to execute arbitrary code on the system.