WM
Product
Wyse Management Suite
70
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 21Medium 40Low 3
Watch
Add Wyse Management Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-81240 | 9.8 | Sep 15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before WMS 2605.0.3.683 |
| CVE-2026-81239 | 9.8 | Sep 15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before WMS 2605.0.3.683 |
| CVE-2026-81236 | 9.8 | Sep 15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before WMS 2605.0.3.683 |
| CVE-2026-41120 | 9.8 | Jun 25 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability Affected: before Version 5.5 HF1 or later |
| CVE-2021-36336 | 9.8 | Dec 21 | Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system Affected: through 3.3.1 |
| CVE-2026-81238 | 9.1 | Sep 15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability Affected: before WMS 2605.0.3.683 |
| CVE-2026-44271 | 8.8 | Jun 22 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability Affected: before 2605 |
| CVE-2026-44272 | 8.8 | Jun 22 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability Affected: before 2605 |
| CVE-2026-22765 | 8.8 | Feb 24 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability Affected: before 5.5 |
| CVE-2022-33928 | 8.8 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI Affected: before 3.7 |
| CVE-2025-36574 | 8.2 | Jun 10 | Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability Affected: before 5.2 |
| CVE-2026-63700 | 7.8 | Aug 14 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability Affected: before 2605.0.2 |
| CVE-2026-63701 | 7.8 | Aug 14 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability Affected: before 2605.0.2 |
| CVE-2026-44274 | 7.8 | Jun 22 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability Affected: before 2605 |
| CVE-2018-11063 | 7.8 | Aug 10 | Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities Affected: Standard through 1.1; Pro through 1.1 |
| CVE-2025-36575 | 7.5 | Jun 10 | Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability Affected: before 5.2 |
| CVE-2025-29981 | 7.5 | Apr 2 | Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability Affected: before 5.1 |
| CVE-2025-27694 | 7.5 | Apr 2 | Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability Affected: before 5.1 |
| CVE-2022-33930 | 7.5 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages Affected: before 3.7 |
| CVE-2021-36337 | 7.4 | Dec 21 | Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby… Affected: through 3.3.1 |
| CVE-2026-66271 | 7.2 | Aug 14 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before 2605.0.2 |
| CVE-2026-66270 | 7.2 | Aug 14 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before 2605.0.2 |
| CVE-2026-49506 | 7.2 | Jun 25 | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability Affected: before Version 5.5 HF1 or later |
| CVE-2026-22766 | 7.2 | Feb 24 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before 5.5 |
| CVE-2025-27692 | 7.2 | Apr 2 | Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability Affected: before 5.1 |
| CVE-2024-49597 | 7.2 | Nov 26 | Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability Affected: through 4.4 |
| CVE-2022-23155 | 7.2 | Apr 1 | Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability Affected: 2.0 through 3.5.2 |
| CVE-2025-36578 | 6.8 | Jun 10 | Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability Affected: before 5.2 |
| CVE-2025-29982 | 6.8 | Apr 2 | Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability Affected: before 5.1 |
| CVE-2026-81237 | 6.5 | Sep 15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability Affected: before WMS 2605.0.3.683 |
| CVE-2024-49596 | 6.5 | Nov 26 | Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability Affected: through 4.4 |
| CVE-2023-32481 | 6.5 | Jul 20 | Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability Affected: before 4.0 |
| CVE-2022-46754 | 6.5 | Feb 11 | Wyse Management Suite 3.8 and below contain an improper access control vulnerability Affected: through 3.8.0 |
| CVE-2022-34365 | 6.5 | Aug 10 | WMS 3.7 contains a Path Traversal Vulnerability in Device API Affected: before 3.8 |
| CVE-2022-33927 | 6.5 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability Affected: before 3.7 |
| CVE-2022-33926 | 6.5 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability Affected: before 3.7 |
| CVE-2022-33925 | 6.5 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI Affected: before 3.7 |
| CVE-2022-29090 | 6.5 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability Affected: before 3.7 |
| CVE-2021-21586 | 6.5 | Jul 15 | Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability Affected: through 3.2 |
| CVE-2019-3770 | 6.4 | Mar 13 | Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability when unregistering a device Affected: before 1.4.1 |
| CVE-2019-3769 | 6.4 | Mar 13 | Dell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting vulnerability Affected: before 1.4.1 |
| CVE-2025-36577 | 6.1 | Jun 10 | Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability Affected: before 5.2 |
| CVE-2022-33929 | 6.1 | Aug 10 | Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page Affected: before 3.7 |
| CVE-2020-29498 | 6.1 | Jan 4 | Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability Affected: before 3.1 |
| CVE-2026-63702 | 5.5 | Aug 14 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability Affected: before 2605.0.2 |
| CVE-2026-23858 | 5.4 | Feb 24 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability Affected: before 5.5 |
| CVE-2022-29096 | 5.4 | Jun 24 | Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page Affected: through 3.6.1 |
| CVE-2020-29497 | 5.4 | Jan 4 | Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability Affected: before 3.1 |
| CVE-2026-66272 | 5.3 | Aug 14 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability Affected: before 2605.0.2 |
| CVE-2022-46675 | 5.3 | Feb 11 | Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability Affected: through 3.8 |
