Vulnerabilities > Dell > Low

DATE CVE VULNERABILITY TITLE RISK
2021-01-04 CVE-2020-29497 Cross-site Scripting vulnerability in Dell Wyse Management Suite
Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability.
network
dell CWE-79
3.5
2020-06-10 CVE-2020-5362 Missing Authorization vulnerability in Dell products
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
local
low complexity
dell CWE-862
2.1
2020-05-28 CVE-2020-5357 Uncontrolled Search Path Element vulnerability in Dell products
Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability.
local
high complexity
dell CWE-427
2.6
2020-03-13 CVE-2019-18576 Information Exposure Through Log Files vulnerability in Dell Xtremio Management Server
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files.
local
low complexity
dell CWE-532
2.1
2020-03-13 CVE-2019-3769 Cross-site Scripting vulnerability in Dell Wyse Management Suite
Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability.
network
dell CWE-79
3.5
2020-03-13 CVE-2019-3770 Cross-site Scripting vulnerability in Dell Wyse Management Suite
Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability when unregistering a device.
network
dell CWE-79
3.5
2020-02-21 CVE-2020-5324 Link Following vulnerability in Dell products
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability.
local
high complexity
dell CWE-59
2.6
2020-02-21 CVE-2020-5326 Missing Authentication for Critical Function vulnerability in Dell products
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu.
local
low complexity
dell CWE-306
2.1
2020-02-06 CVE-2020-5317 Cross-site Scripting vulnerability in Dell EMC Elastic Cloud Storage 3.4.0.0
Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability.
network
dell CWE-79
3.5
2020-01-10 CVE-2019-18588 Cross-site Scripting vulnerability in Dell EMC Powermax and EMC Unisphere for Powermax
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability.
network
dell CWE-79
3.5