Filtered by vendor Dell Subscriptions
Filtered by product Hybrid Client Subscriptions
Total 10 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-32476 1 Dell 1 Hybrid Client 2023-07-31 5.5 Medium
Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on the device can access hard coded secrets in javascript files.
CVE-2022-34428 1 Dell 1 Hybrid Client 2023-07-21 2.7 Low
Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service.
CVE-2022-34430 1 Dell 1 Hybrid Client 2022-10-13 7.5 High
Dell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
CVE-2022-34432 1 Dell 1 Hybrid Client 2022-10-13 8.2 High
Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders.
CVE-2022-34431 1 Dell 1 Hybrid Client 2022-10-13 6.5 Medium
Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible.
CVE-2022-34429 1 Dell 1 Hybrid Client 2022-10-05 7.1 High
Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
CVE-2021-21537 1 Dell 1 Hybrid Client 2021-05-06 5.5 Medium
Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to view and exfiltrate sensitive information on the system.
CVE-2021-21534 1 Dell 1 Hybrid Client 2021-05-06 3.3 Low
Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain access to sensitive information via the local API.
CVE-2021-21535 1 Dell 1 Hybrid Client 2021-05-06 7.8 High
Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain root level access to the system.
CVE-2021-21536 1 Dell 1 Hybrid Client 2021-05-06 5.5 Medium
Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to register the client to a server in order to view sensitive information.