{"id":"CVE-2025-36574","aliases":["EUVD-2025-17754","GHSA-qcp9-xrh4-rcw2"],"status":"published","title":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal...","description":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00515,"percentile":0.44227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-36"],"published":"2025-06-10T17:27:04Z","modified":"2026-06-17T09:14:48Z","products":[{"vendor":"dell","product":"wyse management suite"},{"vendor":"dell","product":"wyse_management_suite"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000325679/dsa-2025-226","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-36574"},{"url":"https://github.com/advisories/GHSA-qcp9-xrh4-rcw2"}],"sources":{"cve":[{"id":"CVE-2025-36574","description":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.","status":"published","published":"2025-06-10T17:27:04.321Z","modified":"2025-06-10T17:46:47.698Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T14:32:45.105469Z"}],"euvd":[{"id":"EUVD-2025-17754","description":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.","status":"published","published":"2025-06-10T17:27:04Z","modified":"2025-06-10T17:46:47Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T20:32:26.841647Z"}],"ghsa":[{"id":"GHSA-qcp9-xrh4-rcw2","title":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal...","description":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.","status":"published","published":"2025-06-10T18:32:32Z","modified":"2025-06-10T18:32:36Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T15:02:40.026129Z"}],"nvd":[{"id":"CVE-2025-36574","description":"Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.","status":"published","published":"2025-06-10T18:15:30.883Z","modified":"2026-06-17T09:14:48.847Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T14:11:11.4244Z"}]}}