CVEvulnerability

CVE-2024-39586

4.3 MEDIUM Published 2024-10-09 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-10-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.9 LOW — CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-611

Description

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

Affected configurations

• dell emc appsync (>= 4.3.0.0 < 4.6.0.3)

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References