Vulnerabilities

TI-2022-14936 CVE-2022-33931 · GHSA-3jvf-6wvh-pm32

Improper access control in Dell Wyse Management Suite

LOW 28

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00435 Published 2022-08-10 Fixed in 3.7 CWE-284

TI-2022-14935 CVE-2022-33930 · GHSA-29p5-chfq-8h6j

Information disclosure through error messages in Dell Wyse Management Suite

LOW 34

Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00633 Published 2022-08-10 Fixed in 3.7 CWE-209

TI-2022-14934 CVE-2022-33929 · GHSA-vwvj-x4j4-77x5

Cross-site scripting in Dell Wyse Management Suite

LOW 28

Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00557 Published 2022-08-10 Fixed in 3.7 CWE-79

TI-2022-14933 CVE-2022-33928 · GHSA-m23h-q673-4jcq

Cleartext storage of sensitive information in Dell Wyse Management Suite

LOW 38

Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00311 Published 2022-08-10 Fixed in 3.7 CWE-256

TI-2022-14932 CVE-2022-33927 · GHSA-ggv4-gh8g-hp7p

Session fixation in Dell Wyse Management Suite

LOW 29

Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00456 Published 2022-08-10 Fixed in 3.7 CWE-384

TI-2022-14931 CVE-2022-33926 · GHSA-6r4c-273j-37ff

Improper access control in Dell Wyse Management Suite

LOW 32

Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00545 Published 2022-08-10 Fixed in 3.7 CWE-284

TI-2022-14930 CVE-2022-33925 · GHSA-4jr4-78x2-94mm

Improper access control in Dell Wyse Management Suite

LOW 30

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00868 Published 2022-08-10 Fixed in 3.7 CWE-284

TI-2022-14929 CVE-2022-33924 · GHSA-r365-x6fw-qg42

Improper access control in Dell Wyse Management Suite

LOW 25

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could potentially exploit this vulnerability and create rules.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00513 Published 2022-08-10 Fixed in 3.7 CWE-284

TI-2022-11641 CVE-2022-29090 · GHSA-cvqp-9787-7vfj

Cleartext storage of sensitive information in Dell Wyse Management Suite

LOW 37

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00417 Published 2022-08-10 Fixed in 3.7 CWE-317

Vulnerabilities

Filters