Vulnerabilities > Dell > Wyse Management Suite > 3.2

DATE CVE VULNERABILITY TITLE RISK
2022-06-24 CVE-2022-29097 Path Traversal vulnerability in Dell Wyse Management Suite
Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API.
network
low complexity
dell CWE-22
4.0
2022-04-01 CVE-2022-23155 Unrestricted Upload of File with Dangerous Type vulnerability in Dell Wyse Management Suite
Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability.
network
low complexity
dell CWE-434
critical
9.0
2021-12-21 CVE-2021-36336 Deserialization of Untrusted Data vulnerability in Dell Wyse Management Suite
Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system.
network
low complexity
dell CWE-502
7.5
2021-12-21 CVE-2021-36337 Inadequate Encryption Strength vulnerability in Dell Wyse Management Suite
Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity of data.
network
dell CWE-326
5.8
2021-07-15 CVE-2021-21586 Path Traversal vulnerability in Dell Wyse Management Suite
Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability.
network
low complexity
dell CWE-22
6.8
2021-07-15 CVE-2021-21587 Information Exposure vulnerability in Dell Wyse Management Suite
Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability.
local
low complexity
dell CWE-200
2.1