CVE-2023-43067

6.5 mediumEPSS 0.5%

Medium (6.5) in dell. EPSS 0.5% chance of exploitation in the next 30 days.

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2023-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:unity_operating_environment
dell:unity_xt_operating_environment
dell:unityvsa_operating_environment

References

https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities

Check your stack JSON