CVE-2022-29096

Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.

• CWE-79
• CWE-79

• https://www.dell.com/support/kbdoc/en-us/000200215/dsa-2022-143-dell-wyse-management-suite-security-update-for-multiple-vulnerabilitiesVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000200215/dsa-2022-143-dell-wyse-management-suite-security-update-for-multiple-vulnerabilitiesVendor Advisory

Published

Jun 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29090Dell Wyse Management Suite 3.6.1 and below contains a Sensit…6.5
• CVE-2022-29091Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior t…6.1
• CVE-2022-29092Dell SupportAssist Client Consumer versions (3.11.0 and vers…7.8
• CVE-2022-29093Dell SupportAssist Client Consumer versions (3.10.4 and vers…7.1
• CVE-2022-29094Dell SupportAssist Client Consumer versions (3.10.4 and vers…7.1
• CVE-2022-29095Dell SupportAssist Client Consumer versions (3.10.4 and prio…9.6
• CVE-2022-29097Dell WMS 3.6.1 and below contains a Path Traversal vulnerabi…4.9
• CVE-2022-29098Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, cont…7.5
• CVE-2022-29099Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-29100Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-29101Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-29102Windows Failover Cluster Information Disclosure Vulnerabilit…5.5