Cross site scripting

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the...

CVE-2020-29498

CVE-2020-29498 concerns Dell Wyse Management Suite prior to 3.1, which includes an open redirect vulnerability. A remote unauthenticated attacker could entice users to click maliciously crafted links, redirecting them to arbitrary web URLs and potentially enabling phishing. Connected sources corr...

CVE-2020-29498

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The...

CVE-2020-29497

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code under the device tag. When victim users access the submitted...

CVE-2020-29496

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the...

CVE-2020-29497

Dell Wyse Management Suite prior to version 3.1 contains a stored cross-site scripting vulnerability (CVE-2020-29497). A remote authenticated attacker with low privileges can store malicious HTML or JavaScript under the device tag, which is executed by victim users’ browsers in the context of the...

CVE-2020-29496

Dell Wyse Management Suite before version 3.1 is affected by CVE-2020-29496: a stored cross-site scripting vulnerability where a remote authenticated attacker with high privileges can inject HTML/JavaScript when creating Endusers, resulting in code execution in affected users’ browsers. The issue...

CVE-2020-29492

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station...

CVE-2020-29492

Dell Wyse ThinOS 8.6 and earlier are affected by two insecurities (CVE-2020-29491, CVE-2020-29492) stemming from an unprotected FTP server used to fetch configurations. Attackers on the same network could read and then alter INI configuration files, enabling read/write access to device settings a...

CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...

CVE-2020-29491

CVE-2020-29491 affects Dell Wyse ThinOS v8.6 and earlier, arising from unauthenticated FTP access to a local configuration/INI server. This allows remote readers and, potentially, writers to access or modify per-device configuration files on the network, which may expose credentials and enable fu...

Dell Wyse Management Suite 输入验证错误漏洞

Wyse Management Suite is a next-generation management solution that enables you to centrally configure, monitor, manage and optimize Wyse thin clients. An open redirection vulnerability exists in Wyse Management Suite versions prior to 3.1. An attacker could exploit this vulnerability by tricking...

Dell Wyse ThinOS 授权问题漏洞

Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS 8.6 and prior versions, which can be exploited by an attacker to access writable files and manipulate the configuration of any targeted specific site...

Dell Wyse ThinOS 安全漏洞

Wyse ThinOS is a highly secure, virus-resistant thin operating system. An insecure default configuration vulnerability exists in Wyse ThinOS 8.6 and earlier versions. An attacker could exploit the vulnerability to access sensitive information on the local network...

DELL Dell Wyse Management Suite 跨站脚本漏洞

Wyse Management Suite is a next-generation management solution that enables you to centrally configure, monitor, manage and optimize Wyse thin clients. A stored cross-site scripting vulnerability exists in versions prior to Wyse Management Suite 3.1. An attacker could exploit this vulnerability t...

DELL Dell Wyse Management Suite 跨站脚本漏洞

Wyse Management Suite is a next-generation management solution that enables you to centrally configure, monitor, manage and optimize Wyse thin clients. A stored cross-site scripting vulnerability exists in versions prior to Wyse Management Suite 3.1. An attacker could exploit this vulnerability t...

Serious vulnerabilities fixed in Dell Wyse ThinOS

Vulnerabilities have been fixed in Dell Wyse ThinOS. A malicious person with access to a local FTP server could exploit the vulnerabilities to obtain sensitive information. The malicious party, by accessing this information and the ability to modify configuration files, the entire system. Dell ha...

Critical Bugs in Dell Wyse Thin Clients Allow Code Execution, Client Takeovers

Dell has patched two critical security vulnerabilities in its Dell Wyse Thin Client Devices, which are small form-factor computers optimized for connecting to a remote desktop. The bugs allow arbitrary code execution and the ability to access files and credentials, researchers said. Thin clients...

Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices

A team of researchers today unveiled two critical security vulnerabilities in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices. The flaws, which were uncovered by healthcare cybersecurity provide...

Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices

A team of researchers today unveiled two critical security vulnerabilities in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices. The flaws, which were uncovered by healthcare cybersecurity provide...