Dell AppSync 代码问题漏洞

Dell AppSync is a data backup and recovery management software from Dell. An XML External Entity Reference Improper Restriction vulnerability exists in Dell AppSync version 4.6.0.0, which stems from improper handling of XML external entity parsing. An attacker could exploit this vulnerability to...

Dell AppSync 代码问题漏洞

Dell AppSync is a data replication management application from Dell USA. A file upload vulnerability exists in Dell AppSync version 4.6.0.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by...

PT-2025-30299 · Dell · Dell Appsync

Name of the Vulnerable Software and Affected Versions: Dell AppSync version 4.6.0.0 Description: Dell AppSync version 4.6.0.0 contains an Improper Restriction of XML External Entity Reference issue. A low privileged attacker with local access could potentially exploit this issue, leading to...

@aws-amplify/amplify-app (>=5.0.39-beta-latest.0, <=5.0.42), @aws-amplify/amplify-appsync-simulator (>=2.16.10-beta-latest.0, <=2.16.12) +67 more potentially affected by unknown CVE via aws-cdk-lib (>=2.172.0, <=2.189.0)

aws-cdk-lib NPM version =2.172.0, =5.0.39-beta-latest.0, =2.16.10-beta-latest.0, =5.0.38-beta-latest.0, =3.7.18-beta-latest.0, =3.1.26-beta-latest.0, =5.7.12-beta-latest.0, =3.5.18-beta-latest.0, =3.5.39-beta-latest.0, =5.1.31-beta-latest.0, =2.26.28-beta-latest.0, =5.5.18-beta-latest.0,...

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

CVE-2024-52542

Dell AppSync 4.6.0.x is affected by a Symbolic Link (Symlink) Following vulnerability. The root cause is the mismanagement of symlinks that allows a low-privileged, locally connected attacker to tamper information. Impact is limited to information integrity (I: High; A: None; C: None per docs). N...

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

Dell AppSync Server 安全漏洞

Dell AppSync Server is a copy data management software from Dell USA. A security vulnerability exists in Dell AppSync Server version 4.6.0.x, which stems from the inclusion of a symbolic link tracking vulnerability that could be exploited by a low-privileged attacker with local access rights to...

PT-2024-35367 · Dell · Dell Appsync

Name of the Vulnerable Software and Affected Versions: Dell AppSync version 4.6.0.x Description: A low privileged attacker with local access could potentially exploit a Symbolic Link Symlink Following vulnerability, leading to information tampering. Recommendations: For Dell AppSync version...

Dell AppSync Server XML External Entity Injection Vulnerability

Dell AppSync Server is a copy data management software from Dell USA. An XML external entity injection vulnerability exists in Dell AppSync Server versions 4.3 through 4.6, which arises from a networked system or product that does not have the correct filters in place to allow references to...

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

CVE-2024-39586

Dell AppSync Server (versions 4.3–4.6) contains an XML External Entity (XXE) vulnerability. An adjacent, high-privilege attacker could potentially leverage improperly filtered XML input to disclose information. The issue is rooted in how external entities are processed, allowing unauthorized read...

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

Dell AppSync Server 代码问题漏洞

Dell AppSync Server is a copy data management software from Dell USA. An XML external entity injection vulnerability exists in Dell AppSync Server versions 4.3 through 4.6, which arises from a networked system or product that does not have the correct filters in place to allow references to...

PT-2024-28543 · Dell · Dell Appsync Server

Name of the Vulnerable Software and Affected Versions: Dell AppSync Server versions 4.3 through 4.6 Description: The issue is related to an XML External Entity Injection, which could be exploited by an adjacent high privileged attacker, potentially leading to information disclosure...

CVE-2024-25957

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync...