Sonicwall Analytics vulnerabilities

• sonicwall analytics, gms, global management system +2 more SonicWall GMS and Analytics CAS Web Services application use static values for authentication... CVE-2023-34137 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a... CVE-2023-34136 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated... CVE-2023-34135 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and... CVE-2023-34134 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2023-34133 Public exploit EPSS 72.8% 7.5 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Use of password hash instead of password for authentication vulnerability in SonicWall GMS and... CVE-2023-34132 Public exploit 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and... CVE-2023-34131 5.3 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to... CVE-2023-34130 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2023-34129 EPSS 41.4% 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.... CVE-2023-34128 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... CVE-2023-34127 Public exploit EPSS 85.8% 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on... CVE-2023-34126 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read... CVE-2023-34125 EPSS 23.6% 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks,... CVE-2023-34124 Public exploit EPSS 50.5% 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This... CVE-2023-34123 7.5 HighJuly 12, 2023
• sonicwall analytics, analytics on-prem, gms +1 more +3 more Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL... CVE-2022-22280 9.8 CriticalJuly 29, 2022
• sonicwall analytics, analytics on-prem +1 more SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface... CVE-2021-20032 9.8 CriticalAugust 10, 2021