VULNERABILITY INTELLIGENCE

CVE-2024-39586

CVSS score2.9 LOW
EPSS probability0.22%
CISA KEVNot currently listed
Published2024-10-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L

Description

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

Weakness classification

  • security_alert@emc.com: CWE-611

Primary references