Wyse Management Suite Cross-Site Scripting Vulnerability (CNVD-2022-62182)

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, Inc. A cross-site scripting vulnerability exists in Wyse Management Suite 3.6.1 and prior, which stems from a lack of data validation filtering of user-supplied data and output. An authenticated attacker could exploit the vulnerability to execute malicious HTML or JavaScript code in the context of a vulnerable Web application in the victim user’s Web browser.