CVE-2025-36603: Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access…

PriorityP419medium4.8CVSS 3.1

AVLACLPRLUIRSUCLILAL

EPSS

0.12%

2.0th percentile

Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	appsync	< 4.6.0.4	4.6.0.4
dell	appsync	>= NA < 4.6.0.4	4.6.0.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.