Vulnerability Details CVE-2024-39586
Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.3%
CVSS Severity
CVSS v3 Score 2.9
Products affected by CVE-2024-39586
-
cpe:2.3:a:dell:emc_appsync:4.3.0.0
-
cpe:2.3:a:dell:emc_appsync:4.4.0.0
-
cpe:2.3:a:dell:emc_appsync:4.6.0.0
-
cpe:2.3:a:dell:emc_appsync:4.6.0.1
-
cpe:2.3:a:dell:emc_appsync:4.6.0.2