Emc Appsync vulnerabilities

5 CVEs affecting Emc Appsync, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32458, published 2023-09-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8015, published 2017-09-12. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.
CVE-2017-8018, published 2017-10-03. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. EMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of service (DoS) vulnerability that could potentially be exploited by malicious users to compromise the…
CVE-2014-4634, published 2014-12-30. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed…
CVE-2017-14376, published 2017-11-01. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.
CVE-2023-32458, published 2023-09-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could…