Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.
| Software | From | Fixed in |
|---|---|---|
| dell / unity_operating_environment | - | 5.3.0.0.5.120 |
| dell / unity_xt_operating_environment | - | 5.3.0.0.5.120 |
| dell / unityvsa_operating_environment | - | 5.3.0.0.5.120 |