2.9
Faible
CVE-2024-39586 Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability
Description
Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AppSync 4.3 | 4.3.0.0 → 4.6.0.0 | Pas de correctif indiqué |
Autres CVE de AppSync
Les 12 CVE de AppSync →
CVE-2026-32657
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322,…
7.3
Élevée
CVE-2026-22768
Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability
7.3
Élevée
CVE-2026-22767
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability
7.3
Élevée
CVE-2025-32744
Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability
6.6
Moyenne