2.9
Low
CVE-2024-39586 Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability
Description
Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AppSync 4.3 | 4.3.0.0 → 4.6.0.0 | No fix stated |
Other CVEs of AppSync
The 12 CVEs of AppSync →
CVE-2026-32657
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322,…
7.3
High
CVE-2026-22768
Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability
7.3
High
CVE-2026-22767
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability
7.3
High
CVE-2025-32744
Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability
6.6
Medium