CVE-2022-22553

9.8 criticalEPSS 1.1%

Critical (9.8) in dell emc appsync. EPSS 1.1% chance of exploitation in the next 30 days.

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2022-01-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:emc_appsync

References

https://www.dell.com/support/kbdoc/000195377
https://www.dell.com/support/kbdoc/000195377

Check your stack JSON