CVE-2025-29981

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-29981
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*
History

11 Jul 2025, 18:02

Type Values Removed Values Added
First Time Dell wyse Management Suite
Dell
Summary
  • (es) Dell Wyse Management Suite, versiones anteriores a WMS 5.1, contiene una vulnerabilidad de exposición de información confidencial mediante consultas de datos. Un atacante no autenticado con acceso remoto podría explotar esta vulnerabilidad, lo que podría provocar la divulgación de información.
References () https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 - () https://www.dell.com/support/kbdoc/en-us/000296515/dsa-2025-135 - Vendor Advisory
CPE cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*

02 Apr 2025, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-02 01:15

Updated : 2025-07-11 18:02

NVD link : CVE-2025-29981

Mitre link : CVE-2025-29981

CVE.ORG link : CVE-2025-29981

JSON object : View

Products Affected

dell

  • wyse_management_suite
CWE
CWE-202

Exposure of Sensitive Information Through Data Queries