GCVE - cpe:2.3:a:emc:appsync:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:appsync:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Appsync (`42b935d3-2864-5017-acbc-b42a445302eb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-32458`	vulnerable	2026-06-08 06:04:45.974414	Details available HIGH (7.3) Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation leading to a privilege escalation. Published: 2023-09-27T15:52:27.559Z Updated: 2024-09-23T20:47:22.104Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000218038/dsa-2023-331-dell-emc-appsync-security-update-for-dell-embedded-service-enabler-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8018`	vulnerable	2026-06-08 05:10:06.894729	Details available EMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of service (DoS) vulnerability that could potentially be exploited by malicious users to compromise the affected system. Published: 2017-10-02T05:00:00.000Z Updated: 2024-08-05T16:19:29.635Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Sep/75 http://www.securityfocus.com/bid/101016	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8015`	vulnerable	2026-06-08 05:10:06.887736	Details available EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system. Published: 2017-09-12T20:00:00.000Z Updated: 2024-08-05T16:19:29.767Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/100683 http://seclists.org/fulldisclosure/2017/Sep/14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14376`	vulnerable	2026-06-08 05:08:49.830932	Details available EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system. Published: 2017-11-01T01:00:00.000Z Updated: 2024-08-05T19:27:40.314Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101626 http://seclists.org/fulldisclosure/2017/Oct/68	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4634`	vulnerable	2026-06-08 05:05:45.322035	Details available Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character. Published: 2014-12-30T15:00:00.000Z Updated: 2024-08-06T11:20:26.673Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2014-12/0170.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.