CVE-2025-36603

Description

Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

PUBLISHED Reserved 2025-04-15 | Published 2025-07-21 | Updated 2025-07-21 | Assigner dell

Problem types

CWE-611: Improper Restriction of XML External Entity Reference

Product status

Credits

Dell would like to thank Ouallaout Noureddine for reporting this issue finder

References

www.dell.com/...rity-update-for-dell-appsync-vulnerabilities vendor-advisory

cve.org (CVE-2025-36603)

nvd.nist.gov (CVE-2025-36603)

Download JSON