Advisories · Technology
Dell AppSync.
Every CVE that names Dell AppSync among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
Dell AppSync: Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1…
- Dell AppSync
- Dell Metro Node
- CWE-61
- CVSS 7.3 High
Incorrect permission assignment in Dell AppSync
- Dell AppSync
- Broken access control
- CVSS 7.3 High
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability.
- Dell AppSync
- CWE-61
- CVSS 6.6 Medium
Unrestricted file upload in Dell AppSync
- Dell AppSync
- Unrestricted file upload
- CVSS 4.2 Medium
XML external entity injection in Dell AppSync
- Dell AppSync
- XML external entities (XXE)
- CVSS 4.4 Medium
Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability.
- Dell AppSync
- CWE-61
- CVSS 2.9 Low
XML external entity injection in Dell AppSync
- Dell AppSync
- XML external entities (XXE)
- CVSS 6.2 Medium
Sensitive information in log files in Dell AppSync
- Dell AppSync
- Information disclosure
- CVSS 7.5 High
Path traversal in Dell AppSync
- Dell AppSync
- Path traversal
- CVSS 8.1 High
Unlimited authentication attempts in Dell AppSync
- Dell AppSync
- Authentication bypass
- CVSS 6.9 Medium
Clickjacking in Dell AppSync
- Dell AppSync
- CWE-1021
- CVSS 8.3 High
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings.
- Dell AppSync
- CWE-598