PT-2025-30299 · Dell · Dell Appsync

Published 2025-07-15 · Updated 2025-07-21 · CVE-2025-36603

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell AppSync version 4.6.0.0

Description Dell AppSync version 4.6.0.0 contains an Improper Restriction of XML External Entity Reference issue. A low privileged attacker with local access could potentially exploit this issue, leading to Information disclosure and Information tampering.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2025-10465

CVE-2025-36603

Affected Products

Dell Appsync

References · 5

• https://dell.com/support/kbdoc/en-us/000345331/dsa-2025-277-security-update-for-dell-appsync-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-36603 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36603 · Security Note
• https://bdu.fstec.ru/vul/2025-10465 · Security Note
• https://twitter.com/CVEnew/status/1947339050118947233 · Twitter Post