CVE-2025-36603
—CVSS 3.1
4.8 medium
EPSS
<1%p1
Published
()
Modified
Description
Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.
- Vendors
- dell
- Products
- appsync
- Weakness
- CWE-611
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.