Sonicwall Global Management System vulnerabilities

• sonicwall gms, global management system +1 more Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability... CVE-2024-29011 7.5 HighMay 1, 2024
• sonicwall gms, global management system +1 more The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE)... CVE-2024-29010 7.1 HighMay 1, 2024
• sonicwall analytics, gms, global management system +2 more SonicWall GMS and Analytics CAS Web Services application use static values for authentication... CVE-2023-34137 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a... CVE-2023-34136 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated... CVE-2023-34135 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and... CVE-2023-34134 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2023-34133 Public exploit EPSS 72.8% 7.5 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Use of password hash instead of password for authentication vulnerability in SonicWall GMS and... CVE-2023-34132 Public exploit 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and... CVE-2023-34131 5.3 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to... CVE-2023-34130 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2023-34129 EPSS 41.4% 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.... CVE-2023-34128 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... CVE-2023-34127 Public exploit EPSS 85.8% 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on... CVE-2023-34126 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read... CVE-2023-34125 EPSS 23.6% 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks,... CVE-2023-34124 Public exploit EPSS 50.5% 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This... CVE-2023-34123 7.5 HighJuly 12, 2023
• sonicwall gms, global management system +1 more SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker... CVE-2021-20030 7.5 HighOctober 13, 2022
• sonicwall analytics, analytics on-prem, gms +1 more +3 more Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL... CVE-2022-22280 9.8 CriticalJuly 29, 2022
• sonicwall global management system (gms), global management system +1 more A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker... CVE-2021-20020 9.8 CriticalApril 10, 2021
• sonicwall analyzer, global management system, universal management appliance +1 more +3 more An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management... CVE-2013-1359 Public exploit EPSS 89.4% 9.8 CriticalFebruary 11, 2020
• sonicwall analyzer, global management system, universal management appliance +1 more +3 more An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4... CVE-2013-1360 Public exploit EPSS 23.2% 9.8 CriticalFebruary 11, 2020
• sonicwall gms, global management system +1 more A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This... CVE-2019-7478 9.8 CriticalDecember 30, 2019
• sonicwall global management system (gms), global management system +1 more A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access... CVE-2019-7476 8.1 HighApril 26, 2019
• sonicwall global management system (gms), global management system +1 more A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on... CVE-2018-9866 9.8 CriticalAugust 3, 2018
• debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 more linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.4% 5.5 MediumMay 21, 2018
• sonicwall global management system, analyzer +1 more SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `... CVE-2018-5691 5.4 MediumJanuary 14, 2018
• sonicwall analyzer, global management system, uma em5000 firmware +2 more The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1... CVE-2016-2397 9.8 CriticalFebruary 17, 2016
• sonicwall analyzer, global management system, uma em5000 firmware +2 more The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8... CVE-2016-2396 9.9 CriticalFebruary 17, 2016
• sonicwall analyzer, global management system, uma em5000 firmware +2 more The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before... CVE-2015-3990 9.0 HighMay 20, 2015
• sonicwall analyzer, global management system, uma em5000 +2 more The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2,... CVE-2014-8420 Public exploit EPSS 24.0% 9.0 HighNovember 25, 2014
• sonicwall analyzer, global management system, uma em5000 +2 more Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer,... CVE-2014-5024 4.3 MediumJuly 24, 2014
• sonicwall analyzer, global management system +1 more Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2,... CVE-2014-0332 4.3 MediumFebruary 14, 2014
• sonicwall analyzer, global management system, uma e5000 firmware +2 more Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert... CVE-2013-7025 Public exploit 3.5 LowDecember 9, 2013