Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.3%
CVSS Severity
CVSS v3 Score 2.9
Products affected by CVE-2024-39586
  • Dell » Emc Appsync » Version: 4.3.0.0
    cpe:2.3:a:dell:emc_appsync:4.3.0.0
  • Dell » Emc Appsync » Version: 4.4.0.0
    cpe:2.3:a:dell:emc_appsync:4.4.0.0
  • Dell » Emc Appsync » Version: 4.6.0.0
    cpe:2.3:a:dell:emc_appsync:4.6.0.0
  • Dell » Emc Appsync » Version: 4.6.0.1
    cpe:2.3:a:dell:emc_appsync:4.6.0.1
  • Dell » Emc Appsync » Version: 4.6.0.2
    cpe:2.3:a:dell:emc_appsync:4.6.0.2


Contact Us

Shodan ® - All rights reserved