CVE-2023-43067

—

CVSS 3.1

6.5 medium

EPSS

<1%p37

Published

Oct 23, 2023 (Oct 23, 2023)

Modified

Jun 17, 2026

Description

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.

Vendors: dell
Products: unity operating environment, unity xt operating environment, unityvsa operating environment
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.