CVE-2024-39586CWE-611

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability

Low · published October 9, 2024

CVSS v3.1
2.9
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.6th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2024-10-09T06:48Z
EPSS history
Timeline
  • 09 OCT 06:48Z
    Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability
    cvelistv5