Known vulnerabilities in Dell EMC AppSync

Known vulnerabilities in Dell EMC AppSync

Vendor: Dell

Software: Dell EMC AppSync

Software CPE: cpe:2.3:a:dell:appsync:*:*:*:*:*:*:*:*

Website: https://www.delltechnologies.com/en-us/index.htm

Total vulnerabilities: 13

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU71287 - Improper input validation CVE-2023-21835	CWE-20	Medium	No	No	4.6.0.1	17.01.2023	SB2023011784 SB2023011785 SB2023011882 and 67 more
#VU71288 - Improper input validation CVE-2023-21830	CWE-20	Medium	No	No	4.6.0.1	17.01.2023	SB2023011784 SB2023011785 SB2023012377 and 112 more
#VU71289 - Improper input validation CVE-2023-21843	CWE-20	Low	No	No	4.6.0.1	17.01.2023	SB2023011784 SB2023011785 SB2023011882 and 146 more
#VU66942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-46827	CWE-79	Low	No	No	4.5.0.0	02.09.2022	SB2021090220 SB2022092306 SB2022092309 and 6 more
#VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965	CWE-94	Critical	Available	Exploited	4.4.0.0	31.03.2022	SB2022033109 SB2022040109 SB2022040110 and 78 more
#VU61429 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24424	CWE-22	Medium	No	No	4.4.0.0	17.03.2022	SB2022031705
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778	CWE-835	Medium	Available	No	4.4.1.0_3996_R1	15.03.2022	SB2022031520 SB2022031522 SB2022031611 and 238 more
#VU60739 - Integer overflow CVE-2022-25315	CWE-190	High	No	No	4.4.1.0_3996_R1	21.02.2022	SB2022022109 SB2022022113 SB2022022411 and 99 more
#VU56613 - Cleartext Transmission of Sensitive Information CVE-2021-22946	CWE-319	Medium	No	No	4.4.1.0_3996_R1	15.09.2021	SB2021091514 SB2021091601 SB2021091715 and 53 more
#VU56064 - Out-of-bounds read CVE-2021-3712	CWE-125	Medium	No	No	4.4.1.0	24.08.2021	SB2021082414 SB2021082508 SB2021082510 and 142 more
#VU54077 - Resource exhaustion CVE-2021-33503	CWE-400	Medium	No	No	4.4.1.0	13.06.2021	SB2021061304 SB2021061305 SB2021071501 and 36 more
#VU19178 - Out-of-bounds write CVE-2019-12900	CWE-787	High	No	No	4.4.1.0	15.07.2019	SB2019071503 SB2019072101 SB2019080907 and 85 more
#VU12 - Use After Free CVE-2016-3189	CWE-416	Low	No	No	4.4.1.0	21.06.2016	SB2016062001 SB2017022203 SB2017082106 and 10 more