Dell Emc Appsync vulnerabilities

6 CVEs affecting Dell Emc Appsync, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-39586, published 2024-10-09.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-24424, published 2022-04-21. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized…
• CVE-2022-22553, published 2022-01-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker…
• CVE-2022-22552, published 2022-01-21. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing…
• CVE-2024-22464, published 2024-02-08. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote…
• CVE-2022-22551, published 2022-01-21. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim…
• CVE-2024-39586, published 2024-10-09. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to…