8.8
Élevée
CVE-2026-44272 Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements…
Description
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wyse Management Suite (WMS) 2605 | premières → < 2605 | 2605 |
Autres CVE de Wyse Management Suite (WMS)
Les 10 CVE de Wyse Management Suite (WMS) →
CVE-2026-63700
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability
7.8
Élevée
CVE-2026-66271
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type…
7.2
Élevée
CVE-2026-66270
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type…
7.2
Élevée
CVE-2026-66272
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function…
5.3
Moyenne