CVE-2021-21586
Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 46.07%
- CWE
- CWE-36
- Published
- 2021-07-15
- Last modified
- 2026-03-13
Affected products
- Dell Wyse Management Suite
Weakness type
Related vulnerabilities
- CVE-2024-48248 — NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /
- CVE-2024-13161 — Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up
- CVE-2024-13160 — Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up
- CVE-2024-13159 — Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up
- CVE-2018-20250 — In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o
- CVE-2023-3765 — Absolute Path Traversal in mlflow/mlflow
- CVE-2025-57790 — Path Traversal Vulnerability
- CVE-2024-20401 — A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unau