low2.9
CVE-2024-39586
Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability.
Impact
Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Appsync | from 4.3.0.0 before 4.6.0.3 |