CVE-2022-29096
Description
Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A reflected XSS in Dell Wyse Management Suite ≤3.6.1 allows authenticated attackers to execute malicious HTML/JS in victims' browsers.
Vulnerability
A reflected cross-site scripting (XSS) vulnerability exists in the saveGroupConfigurations page of Dell Wyse Management Suite (WMS) versions 3.6.1 and below [1]. An authenticated attacker can inject malicious HTML or JavaScript into a crafted URL that, when visited by a victim user, executes in the context of the web application.
Exploitation
An attacker must be authenticated to WMS and craft a malicious link containing the payload. The victim must click the link while logged into the same WMS instance. No special network position or additional privileges are required [1].
Impact
Successful exploitation leads to execution of arbitrary HTML/JavaScript in the victim's browser, potentially resulting in information disclosure, session theft, or client-side request forgery [1].
Mitigation
Dell has released a security update (DSA-2022-143) addressing this vulnerability. Users should upgrade WMS to a patched version (3.6.2 or later) [1]. No workarounds are documented.
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: <=3.6.1
- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.