4.9
Medium
CVE-2023-43067 Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability
Description
Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Unity | Versions not published |
Other CVEs of Unity
The 62 CVEs of Unity →
CVE-2026-32657
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322,…
7.3
High
CVE-2026-21418
Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS…
7.8
High
CVE-2025-43942
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…
7.8
High
CVE-2025-46422
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…
7.8
High