CVE-2019-3769

CVE-2019-3769 is a stored cross-site scripting (XSS) vulnerability affecting Dell Wyse Management Suite versions prior to 1.4.1. A low-privileged, authenticated attacker could inject malicious code into device heartbeat requests, which would then execute in a victim's browser when they access the compromised data. Rated as MEDIUM severity (CVSS 6.4), this vulnerability has a network attack vector and low attack complexity, potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.