CVE-2022-46755

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
DellWyse Management Suite<= 3.8

References

Timeline

Published
Feb 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-467566.7Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploitCVE-2022-46765.4The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as CVE-2022-467617.5The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may caCVE-2022-467627.5The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-467638.8A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database uCVE-2022-467649.8A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to executCVE-2022-467685.9Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not haveCVE-2022-467695.4An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.CVE-2022-46775.4The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow usersCVE-2022-467707.5qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumptCVE-2022-467714.6IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 CVE-2022-467736.5IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid crede
CVE-2022-46755: Medium severity, CVSS 4.9 | Vulnix