Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

70 records in Wyse Management Suite · all components

Priority MEDIUM 49

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00403 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-434
Priority MEDIUM 49

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00403 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-434
Priority MEDIUM 49

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00411 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-434
Priority MEDIUM 45

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00274 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-306
Priority MEDIUM 45

Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0171 Published 2021-12-21 Fixed in 3.5 CWE-502
TI-2021-04667 CVE-2021-21586 · GHSA-h763-4gwg-x6g4

Path traversal in Dell Wyse Management Suite

Priority MEDIUM 42

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04038 Published 2021-07-15 Fixed in 3.3 CWE-36
Priority MEDIUM 41

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2026-02-24 No fix listed CWE-862
TI-2026-32244 CVE-2026-44272 · GHSA-v2m2-r86g-wfp5

SQL injection in Dell Wyse Management Suite

Priority MEDIUM 40

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-06-22 Fixed in 2605 CWE-89
Priority MEDIUM 40

Wyse Management Suite 3.8 and below contain an improper access control vulnerability.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00512 Published 2023-02-10 No fix listed CWE-284
TI-2026-32243 CVE-2026-44271 · GHSA-jrhr-xpg4-wphg

SQL injection in Dell Wyse Management Suite

Priority LOW 38

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-06-22 Fixed in 2605 CWE-89
Priority LOW 35

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00338 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-287
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00761 Published 2026-08-14 Fixed in 2605.0.2 CWE-434
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00761 Published 2026-08-14 Fixed in 2605.0.2 CWE-434
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2026-08-14 Fixed in 2605.0.2 CWE-269
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2026-08-14 Fixed in 2605.0.2 CWE-269
TI-2026-36653 CVE-2026-49506 · GHSA-22f4-hrhx-4j5v

Path traversal in Dell Wyse Management Suite

Priority LOW 35

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0087 Published 2026-06-25 Fixed in Version 5.5 HF1 or later CWE-22
TI-2026-32246 CVE-2026-44274 · GHSA-8qxf-7fxx-743x

Link following in Dell Wyse Management Suite

Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00174 Published 2026-06-22 Fixed in 2605 CWE-59
Load more
Open these records in search →