GCVE - cpe:2.3:a:dell:emc_appsync:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_appsync:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Emc Appsync (`ce77b4df-e6ec-5c92-ac17-8d99322ee818`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-39586`	vulnerable	2026-06-08 06:41:51.136139	Details available LOW (2.9) Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure. Published: 2024-10-09T06:48:53.639Z Updated: 2024-10-09T13:25:52.908Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000234216/dsa-2024-420-security-update-for-dell-emc-appsync-for-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-22464`	vulnerable	2026-06-08 06:29:35.829377	Details available MEDIUM (6.2) Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. Published: 2024-02-08T09:23:48.927Z Updated: 2025-04-24T15:56:31.540Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000221932/dsa-2024-072-security-update-for-dell-emc-appsync-for-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24424`	vulnerable	2026-06-08 05:41:00.557520	Details available HIGH (7.5) Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application. Published: 2022-04-21T20:50:16.773Z Updated: 2024-09-16T20:43:36.814Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000197433	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22553`	vulnerable	2026-06-08 05:40:54.253987	Details available HIGH (8.1) Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users. Published: 2022-01-21T20:15:23.554Z Updated: 2024-09-16T20:27:34.596Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000195377	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22552`	vulnerable	2026-06-08 05:40:54.253611	Details available MEDIUM (6.9) Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations. Published: 2022-01-21T20:15:21.743Z Updated: 2024-09-17T01:36:17.536Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000195377	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22551`	vulnerable	2026-06-08 05:40:54.253060	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.