Wyse Management Suite Dell Wyse Management Suite

Do you want an email whenever new security vulnerabilities are reported in Dell Wyse Management Suite?

By the Year

In 2022 there have been 0 vulnerabilities in Dell Wyse Management Suite . Last year Wyse Management Suite had 8 security vulnerabilities published. Right now, Wyse Management Suite is on track to have less security vulnerabilities in 2022 than it did last year.

Year Vulnerabilities Average Score
2022 0 0.00
2021 8 5.95
2020 2 6.40
2019 0 0.00
2018 1 7.80

It may take a day or so for new Wyse Management Suite vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Dell Wyse Management Suite Security Vulnerabilities

Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1

CVE-2021-36337 7.4 - High - December 21, 2021

Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity of data.

Inadequate Encryption Strength

Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability

CVE-2021-36336 9.8 - Critical - December 21, 2021

Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system.

Marshaling, Unmarshaling

Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability

CVE-2021-21587 3.3 - Low - July 15, 2021

Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this vulnerability in order to obtain the path of files and folders.

Information Disclosure

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability

CVE-2021-21586 6.5 - Medium - July 15, 2021

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system.

Directory traversal

Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status retrieval page, also affecting other users

CVE-2021-21533 4.3 - Medium - April 02, 2021

Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status retrieval page, also affecting other users that would have normally access to the same subset of job details

Improper Input Validation

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability

CVE-2020-29496 4.8 - Medium - January 04, 2021

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.

XSS

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability

CVE-2020-29497 5.4 - Medium - January 04, 2021

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code under the device tag. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.

XSS

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability

CVE-2020-29498 6.1 - Medium - January 04, 2021

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.

Open Redirect

Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability

CVE-2019-3769 6.4 - Medium - March 13, 2020

Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious payload in the device heartbeat request. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.

XSS

Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability when unregistering a device

CVE-2019-3770 6.4 - Medium - March 13, 2020

Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability when unregistering a device. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application.

XSS

Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities

CVE-2018-11063 7.8 - High - August 10, 2018

Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary executables with elevated privileges.

Unquoted Search Path or Element

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Dell Wyse Management Suite or by Dell? Click the Watch button to subscribe.

Dell
Vendor

subscribe