Low severity2.9NVD Advisory· Published Oct 9, 2024· Updated Jun 17, 2026

CVE-2024-39586

Description

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Emc Appsync
cpe:2.3:a:dell:emc_appsync:*:*:*:*:*:*:*:*
Range: >=4.3.0.0,<4.6.0.3
Dell/Dell EMC AppSyncllm-create
Range: 4.3 - 4.6
Dell/AppSync Serverllm-fuzzy
Range: 4.3 - 4.6
Dell/Appsyncv5
Range: 4.3.0.0

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000234216/dsa-2024-420-security-update-for-dell-emc-appsync-for-multiple-vulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.189
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000