CVE-2022-29097

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-23CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jun 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-290987.5Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an acCVE-2022-291025.5Windows Failover Cluster Information Disclosure VulnerabilityCVE-2022-291037.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2022-291047.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-291057.8Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2022-291067.0Windows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityCVE-2022-291075.5Microsoft Office Security Feature Bypass VulnerabilityCVE-2022-291088.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-291097.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2022-291107.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2022-291117.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-291126.5Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-29097: Medium severity, CVSS 4.9 | Vulnix