AppSync vulnerabilities

6 known vulnerabilities in AppSync from Dell. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  AppSync: UNIX Symbolic Link (Symlink) Following

  CVE-2026-32657Aug 18, 2026Dell

  Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.37

• 7.3 High severity

  AppSync: Incorrect Permission Assignment for Critical Resource

  CVE-2026-22768Apr 1, 2026Dell

  Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

• 7.3 High severity

  AppSync: UNIX Symbolic Link (Symlink) Following

  CVE-2026-22767Apr 1, 2026Dell

  Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

• 7.5 High severity

  AppSync: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-24424Apr 21, 2022DellEPSS 1.69%

  Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with

• 9.8 Critical severity

  AppSync: Improper Restriction of Excessive Authentication Attempts

  CVE-2022-22553Jan 21, 2022DellEPSS 1.11%

  Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to passwor

• 8.8 High severity

  AppSync: Session Fixation

  CVE-2022-22551Jan 21, 2022Dell

  DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.