Emc Appsync Security Vulnerabilities and Issues — Emc Appsync CVE List

Lucene search

DellEmc Appsync

3 matches found

CVE•added 2022/01/21 9:15 p.m.•106 views

CVE-2022-22553

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is po...

9.8CVSS9.4AI score0.00464EPSS

CVE•added 2022/01/21 9:15 p.m.•94 views

CVE-2022-22551

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.

8.8CVSS8.5AI score0.00139EPSS

CVE•added 2022/01/21 9:15 p.m.•79 views

CVE-2022-22552

Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.

6.9CVSS6.1AI score0.00209EPSS