Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

70 records

Priority LOW 35

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00338 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-287
Priority MEDIUM 45

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00274 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-306
Priority MEDIUM 49

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00403 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-434
Priority MEDIUM 49

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00403 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-434
Priority MEDIUM 49

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00411 Published 2026-09-15 Fixed in WMS 2605.0.3.683 CWE-434
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2026-08-14 Fixed in 2605.0.2 CWE-269
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00761 Published 2026-08-14 Fixed in 2605.0.2 CWE-434
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00761 Published 2026-08-14 Fixed in 2605.0.2 CWE-434
Priority LOW 30

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00394 Published 2026-08-14 Fixed in 2605.0.2 CWE-200
Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00118 Published 2026-08-14 Fixed in 2605.0.2 CWE-269
Priority LOW 29

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00116 Published 2026-08-14 Fixed in 2605.0.2 CWE-798
TI-2026-36653 CVE-2026-49506 · GHSA-22f4-hrhx-4j5v

Path traversal in Dell Wyse Management Suite

Priority LOW 35

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0087 Published 2026-06-25 Fixed in Version 5.5 HF1 or later CWE-22
TI-2026-32243 CVE-2026-44271 · GHSA-jrhr-xpg4-wphg

SQL injection in Dell Wyse Management Suite

Priority LOW 38

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-06-22 Fixed in 2605 CWE-89
TI-2026-32244 CVE-2026-44272 · GHSA-v2m2-r86g-wfp5

SQL injection in Dell Wyse Management Suite

Priority MEDIUM 40

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-06-22 Fixed in 2605 CWE-89
TI-2026-32246 CVE-2026-44274 · GHSA-8qxf-7fxx-743x

Link following in Dell Wyse Management Suite

Priority LOW 35

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00174 Published 2026-06-22 Fixed in 2605 CWE-59
Priority LOW 24

Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00213 Published 2026-02-24 Fixed in 5.5 CWE-79
Priority LOW 35

Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00807 Published 2026-02-24 No fix listed CWE-434
Priority MEDIUM 41

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2026-02-24 No fix listed CWE-862
Priority LOW 13

Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00194 Published 2025-06-10 Fixed in 5.2 CWE-352
Priority LOW 29

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00411 Published 2025-06-10 Fixed in 5.2 CWE-79
Priority LOW 29

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00305 Published 2025-06-10 Fixed in 5.2 CWE-79
Load more