CVE-2023-43067: Dell Unity Operating Environment

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.

Affected products

• Dell Unity Operating Environment: before 5.3.0.0.5.120 (fixed in 5.3.0.0.5.120)
• Dell Unity Xt Operating Environment: before 5.3.0.0.5.120 (fixed in 5.3.0.0.5.120)
• Dell Unityvsa Operating Environment: before 5.3.0.0.5.120 (fixed in 5.3.0.0.5.120)

Published 2023-10-23. Last modified 2026-06-17.