CVE-2024-39586: Dell Emc Appsync

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

Affected products

• Dell Emc Appsync: from 4.3.0.0, before 4.6.0.3 (fixed in 4.6.0.3)

Published 2024-10-09. Last modified 2026-06-17.