Known vulnerabilities in Dell Support Assist Enterprise - page 3

Vendor: Dell
Software: Dell Support Assist Enterprise
Software CPE: cpe:2.3:a:dell:dell_support_assist_enterprise:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 121
Public exploits: 23
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dell Support Assist Enterprise Dell Support Assist Enterprise is affected by 121 known vulnerabilities: 1 critical, 44 high, 37 medium, 39 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93357 - Cryptographic Issues
CVE-2011-4461		 CWE-310 Low
No
No
 4.00.06.00 26.06.2024 SB2021022238
SB2025080618
#VU93356 - Session Fixation
CVE-2017-5656		 CWE-384 Medium
No
No
 4.00.06.00 26.06.2024 SB2021022238
#VU93354 - Improper Certificate Validation
CVE-2017-5653		 CWE-295 Medium
No
No
 4.00.06.00 26.06.2024 SB2021022238
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 4.00.06.00 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU46670 - Improper Authentication
CVE-2020-13920		 CWE-287 Medium
No
No
 4.00.06.00 10.09.2020 SB2020091414
SB2021022238
SB2024072339
#VU27701 - Insufficiently Protected Credentials
CVE-2019-12423		 CWE-522 Medium
No
No
 4.00.06.00 12.05.2020 SB2020011628
SB2020071609
SB2020071610
and 7 more
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 4.00.06.00 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-1954		 CWE-300 Low
No
No
 4.00.06.00 02.04.2020 SB2020040206
SB2020102703
SB2020102832
and 8 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445		 CWE-113 Medium
No
No
 4.00.06.00 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444		 CWE-444 Medium
No
No
 4.00.06.00 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU22825 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16869		 CWE-444 Medium
No
No
 4.00.06.00 18.11.2019 SB2019092616
SB2019111903
SB2019112016
and 30 more
#VU22577 - Resource Management Errors
CVE-2019-12406		 CWE-399 Medium
No
No
 4.00.06.00 07.11.2019 SB2019110708
SB2020073033
SB2022101121
and 4 more
#VU15156 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-11784		 CWE-601 Low
Available
No
 4.00.06.00 05.10.2018 SB2018100401
SB2018102605
SB2018110806
and 13 more
#VU13528 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7657		 CWE-200 Low
No
No
 4.00.06.00 02.07.2018 SB2018070205
SB2018082001
SB2022040632
and 18 more
#VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7656		 CWE-444 Low
No
No
 4.00.06.00 30.06.2018 SB2018070205
SB2018082001
SB2022041923
and 17 more
#VU13523 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-8039		 CWE-300 Low
No
No
 4.00.06.00 28.06.2018 SB2018062910
SB2019021223
SB2020042115
and 11 more
#VU11285 - Data Handling
CVE-2017-12624		 CWE-19 Low
No
No
 4.00.06.00 27.03.2018 SB2017111431
SB2018072004
SB2018110715
and 5 more
#VU10706 - Permissions, Privileges, and Access Controls
CVE-2018-1305		 CWE-264 Low
No
No
 4.00.06.00 26.02.2018 SB2018022601
SB2018032308
SB2018032107
and 8 more
#VU8697 - Improper input validation
CVE-2017-7674		 CWE-20 Low
No
No
 4.00.06.00 05.10.2017 SB2017070102
SB2017100501
SB2017100209
and 12 more
#VU9654 - Information Exposure Through Timing Discrepancy
CVE-2017-9735		 CWE-208 Low
No
No
 4.00.06.00 17.06.2017 SB2017061704
SB2021072132
SB2023042803
and 12 more


Showing elements 41 - 60 out of 121