CVE-2025-36575

Dell Wyse Management Suite is affected by CVE-2025-36575: an Exposure of Sensitive Information Through Data Queries in versions prior to WMS 5.2. The vulnerability allows an unauthenticated, remote attacker to disclose sensitive information due to inadequate data protection. Affects Dell Wyse Man...

CVE-2025-36575

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2025-24900 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to an Incorrect Authorization vulnerability. A low-privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

PT-2025-24859 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue allows an unauthenticated attacker with remote access to potentially exploit it, leading to information disclosure. This is due to an Exposure of Sensitive Information...

PT-2025-24897 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is an Absolute Path Traversal vulnerability that could be exploited by an unauthenticated attacker with remote access, potentially leading to information disclosure and...

PT-2025-24901 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow a high-privileged attacker with remote...

PT-2025-24898 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2025-36575: Exposure of Sensitive Information Through Data Queries

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-36578: Incorrect Authorization

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-36577: Improper Neutralization of Input During Web Page Generation

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

CVE-2025-36576: Cross-Site Request Forgery (CSRF)

Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery CSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2025-36574: Absolute Path Traversal

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

PT-2025-24899 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.2 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow a high-privileged attacker with remote...

CVE-2025-36580: Improper Neutralization of Input During Web Page Generation

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

The vulnerability of the Dell PowerScale OneFS operating system, related to writing beyond buffer boundaries into memory, allows a attacker to trigger a service failure.

The vulnerability of the Dell PowerScale OneFS operating system lies in writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-24327 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 Description: Dell PowerScale OneFS contains a missing authorization vulnerability in the Network File System NFS export. An unauthenticated attacker with remote access could potentially...

CVE-2025-36564

Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

The vulnerability of the Dell RecoverPoint data protection software for virtual machines, related to access control errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines relates to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of Dell PowerProtect Cyber Recovery’s data storage and protection software lies in its ability to disclose information during data transmission, allowing an intruder to expose the protected information.

The vulnerability of Dell PowerProtect Cyber Recovery’s data storage and protection software lies in the exposure that occurs during data transmission. Exploiting this vulnerability can allow an attacker operating remotely to expose the protected information...

Dell Unity Storage - "Unable to validate the specified certificate (Error Code: 0x1000100)"

Challenge When attempting to add a Dell Unity Storage Appliance that has been upgraded to firmware version 5.5 to Veeam Backup & Replication or operate backups to such storage, the following error occurs: Unable to validate the specified certificate Error Code: 0x1000100 Cause An investigation by...