Skip to content
OpenAdvisories
Medium · 4.2 CVE-2025-36603 EUVD-2025-22111GHSA-v2xr-whr4-9p35

Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacke…

Published Jul 21, 2025 · Updated Jul 21, 2025 · Assigned by dell

Description

Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Affected products

VendorProductAffectedFixed
Dell AppSync NA – < 4.6.0.4 4.6.0.4

References