EA
Product
Emc Appsync
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Emc Appsync to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22553 | 9.8 | Jan 21 | Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI Affected: before 4.4.0.0 |
| CVE-2022-22551 | 8.8 | Jan 21 | DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings Affected: before 4.4.0.0 |
| CVE-2022-24424 | 7.5 | Apr 21 | Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server Affected: 3.9.0.0 before 4.4.0.0 |
| CVE-2024-22464 | 6.8 | Feb 8 | Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs Affected: 4.2.0.0 before 4.6.0.2 |
| CVE-2022-22552 | 6.1 | Jan 21 | Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync Affected: before 4.4.0.0 |
| CVE-2024-39586 | 4.3 | Oct 9 | Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability Affected: 4.3.0.0 before 4.6.0.3 |
Showing 6
