CVE-2025-27693

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

CVE-2025-27693

Dell Wyse Management Suite, versions prior to 5.1, is affected by an Improper Neutralization of Input During Web Page Generation (XSS) in the web UI. Root cause: insufficient input neutralization during page generation. Impact: a high-privileged attacker with remote access could execute script in...

CVE-2025-27694

Dell Wyse Management Suite (Dell) is affected prior to WMS 5.1 by an Insufficient Resource Pool vulnerability. The root cause is an insufficient resource pool that can be triggered by an unauthenticated, remotely accessible attacker, potentially causing a Denial of Service. In the provided source...

CVE-2025-27694

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-29982

Dell Wyse Management Suite (WMS) prior to version 5.1 is affected by an Insecure Inherited Permissions vulnerability. A low-privilege, local attacker could exploit misconfigured inherited permissions to gain unauthorized access. Root cause is insecure inherited permissions in WMS. Remediation: up...

CVE-2025-29982

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-29981

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-29981

Dell Wyse Management Suite (WMS) prior to version 5.1 is affected by CVE-2025-29981, described as Exposure of Sensitive Information Through Data Queries. The vulnerability allows an unauthenticated attacker with remote access to trigger information disclosure due to improper handling of data quer...

CVE-2025-29981

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-06620)

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-06619)

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

Dell Wyse Management Suite 跨站脚本漏洞

The Wyse Management Suite is a cloud and local management platform from Dell, USA. A cross-site scripting vulnerability exists in Wyse Management Suite that stems from improper input neutralization and can be exploited by an attacker to cause script injection...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-06621)

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

PT-2025-14448 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue is related to Insecure Inherited Permissions, which could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized access...

PT-2025-14444 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to WMS 5.1 Description: The issue concerns an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability,...

PT-2025-14445 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow a high-privileged attacker with remote...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-06622)

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

PT-2025-14446 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to WMS 5.1 Description: The issue concerns an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial o...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is a software solution from Dell for managing and monitoring client devices and virtual desktop infrastructures. An information disclosure vulnerability exists in Wyse Management Suite. The vulnerability results in the disclosure of sensitive information due to a data query...

PT-2025-14447 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue allows an unauthenticated attacker with remote access to potentially exploit the vulnerability, leading to information disclosure. This is due to an Exposure of Sensitive...