LOW✓ PATCH🇬🇧 English

CVE-2024-39586

CVSS 2.9v3.1pub. 2024-10-09upd. 2024-10-17

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L

  • Dell Emc Appsync

    APP
    Dell
    4.3.0.0 – 4.6.0.3 (bez)
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
XXE
CWE
Referencje

Powiązane podatności

CVE-2022-24424HIGH7.5ten sam produkt

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote u...

CVE-2022-22551HIGH8.3ten sam produkt

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthe...

CVE-2022-22553HIGH8.1ten sam produkt

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vuln...

CVE-2024-22464MEDIUM6.2ten sam produkt

Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure o...

CVE-2022-22552MEDIUM6.9ten sam produkt

Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated...