CVE-2023-43067: XEE
Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Dell Unity vulnerability?
The vulnerability ID for this Dell Unity vulnerability is CVE-2023-43067.
What is the severity of CVE-2023-43067?
CVE-2023-43067 has a severity of 6.5 (medium).
What is the affected software for CVE-2023-43067?
The affected software for CVE-2023-43067 includes Dell Unity Operating Environment, Dell Unity Xt Operating Environment, and Dell Unityvsa Operating Environment.
What is an XML External Entity (XXE) injection vulnerability?
An XML External Entity (XXE) injection vulnerability is a type of attack that allows an attacker to exploit vulnerable XML parsers and gain unauthorized access to sensitive data or systems.
How can an XXE attack exploit CVE-2023-43067?
An XXE attack can exploit CVE-2023-43067 by injecting malicious XML entities that disclose local files in the file system.