CVEvulnerability

CVE-2023-43067

6.5 MEDIUM Published 2023-10-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-611

Description

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.

Affected configurations

• dell unity operating environment (< 5.3.0.0.5.120) • dell unity xt operating environment (< 5.3.0.0.5.120) • dell unityvsa operating environment (< 5.3.0.0.5.120)

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References