CVE-2025-27693

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.8MEDIUM
EPSS
0.2%
top 59.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Wyse Management Suite
Timeline
PublishedApr 2

Description

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5dell/wyse_management_suiteN/A — 5.1

🔴Vulnerability Details

2
CVEList
CVE-2025-27693: Dell Wyse Management Suite, versions prior to WMS 5↗2025-04-02
▶
GHSA
GHSA-87c6-wxwq-rjm3: Dell Wyse Management Suite, versions prior to WMS 5↗2025-04-02
▶
CVE-2025-27693 (MEDIUM CVSS 4.8) | Dell Wyse Management Suite | cvebase.io