Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Dell AppSync 4.4 Clear all filters
TI-2022-06827 CVE-2022-22553 · GHSA-mvx9-f55c-65h5

Missing brute-force protection in Dell AppSync

Priority MEDIUM 44

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01079 Published 2022-01-21 Fixed in 4.4 CWE-307
TI-2022-06826 CVE-2022-22552 · GHSA-h2m5-pc23-rcvh

Clickjacking in Dell AppSync

Priority LOW 32

Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.00689 Published 2022-01-21 Fixed in 4.4 CWE-1021
TI-2022-06825 CVE-2022-22551 · GHSA-x6f9-ggpf-g22c

Session fixation in Dell AppSync

Priority LOW 38

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00388 Published 2022-01-21 Fixed in 4.4 CWE-598