3.3
Low
CVE-2026-82160 Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web…
Description
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitable with local access to the machine, with an ordinary account and without any user action; the impact on data or service is limited.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wyse Management Suite 2609.0 | earliest → < 2609.0.0.155 | 2609.0.0.155 |
Other CVEs of Wyse Management Suite
The 62 CVEs of Wyse Management Suite →
CVE-2026-82161
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web…
6.8
Medium
CVE-2026-82158
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web…
9.0
Critical
CVE-2026-82159
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web…
8.8
High
CVE-2026-81237
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability
6.5
Medium