Stormshield vulnerabilities

Products

• Network Security 35
• Endpoint Security 15
• Network Security 10
• Management Center 8
• Network Security 3
• Ssl Vpn Client 3

Newest

• stormshield network security Stored XSS in the VPN logs monitor CVE-2026-111088 6.5 MediumOctober 20, 2026
• stormshield network security Stored XSS on SNS Enrollment Portal CVE-2026-113810 7.0 HighOctober 20, 2026
• stormshield network security Stored XSS on SNS Enrollment Portal CVE-2026-113808 7.1 HighOctober 20, 2026
• stormshield network security Improper Signature Verification of Active Update Files CVE-2026-113469 7.5 HighOctober 20, 2026
• stormshield network security Possible DOM XSS in SNS Web Administration Portal CVE-2026-113465 6.6 MediumOctober 20, 2026
• stormshield network security Improper Signature Verification of Firmware Update Files CVE-2026-111090 7.8 HighOctober 20, 2026
• stormshield network security Possible XSS in the SNS web administration panel CVE-2026-14466 4.3 MediumSeptember 4, 2026
• stormshield network security Information leak in NSRPC client history CVE-2026-8482 4.3 MediumJuly 2, 2026
• stormshield network security Connection possible to the Administration portal with a revoked certificate CVE-2026-8480 4.3 MediumJuly 1, 2026
• stormshield network security Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances. CVE-2026-8474 5.3 MediumJune 1, 2026
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication... CVE-2025-48707 7.5 HighSeptember 25, 2025
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through... CVE-2024-37386 4.2 MediumJuly 15, 2024
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x... CVE-2023-28616 7.5 HighDecember 26, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4... CVE-2023-47091 7.5 HighDecember 25, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39,... CVE-2023-41165 4.8 MediumDecember 25, 2023
• stormshield network security In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24... CVE-2023-34198 7.3 HighDecember 25, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through... CVE-2023-47093 6.5 MediumDecember 20, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0... CVE-2023-41166 5.3 MediumDecember 20, 2023
• stormshield network security ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a... CVE-2023-26095 7.5 HighAugust 28, 2023
• stormshield ssl vpn client An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are... CVE-2022-46783 5.3 MediumAugust 28, 2023
• stormshield ssl vpn client Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions. CVE-2021-27932 7.8 HighAugust 25, 2023
• stormshield network security An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login... CVE-2020-11711 4.8 MediumAugust 25, 2023
• stormshield ssl vpn client An issue was discovered in Stormshield SSL VPN Client before 3.2.0. A logged-in user, able to... CVE-2022-46782 7.8 HighAugust 5, 2023
• stormshield endpoint security Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL... CVE-2023-35800 4.3 MediumJune 27, 2023
• stormshield endpoint security Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An... CVE-2023-35799 5.5 MediumJune 27, 2023
• stormshield endpoint security Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an... CVE-2023-23562 4.3 MediumMay 31, 2023
• stormshield endpoint security Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated... CVE-2023-23561 5.5 MediumMay 30, 2023
• clamav, cisco secure endpoint, secure endpoint private cloud +1 more +3 more On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A... CVE-2023-20052 Public exploitFix available 5.3 MediumFebruary 16, 2023
• clamav, cisco secure endpoint, secure endpoint private cloud administration portal +4 more +6 more CVE-2023-20032 affecting package clamav for versions less than 0.105.2-1 CVE-2023-20032 Fix available EPSS 30.1% 9.8 CriticalFebruary 16, 2023
• openssl, stormshield management center +1 more NULL dereference during PKCS7 data verification CVE-2023-0401 Fix available 7.5 HighFebruary 7, 2023
• openssl, siemens bfcclient, ruggedcom ape1808 +9 more +11 more X.400 address type confusion in X.509 GeneralName CVE-2023-0286 Fix available EPSS 69.3% 7.4 HighFebruary 7, 2023
• openssl, stormshield management center +1 more Invalid pointer dereference in d2i_PKCS7 functions CVE-2023-0216 Fix available 7.5 HighFebruary 7, 2023
• openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 more Use-after-free following BIO_new_NDEF CVE-2023-0215 Fix available 7.5 HighFebruary 7, 2023
• openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 more Double free after calling PEM_read_bio_ex CVE-2022-4450 Fix available EPSS 28.6% 7.5 HighFebruary 7, 2023
• openssl, siemens scalance w1750d (jp), scalance w1750d (row) +8 more +10 more Timing Oracle in RSA Decryption CVE-2022-4304 Public exploitFix available EPSS 23.5% 5.9 MediumFebruary 7, 2023
• strongswan, canonical ubuntu linux, debian linux +2 more +4 more strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation... CVE-2022-40617 Fix available 7.5 HighOctober 3, 2022
• stormshield network security Flooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal... CVE-2022-27812 7.5 HighAugust 24, 2022
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• llhttp, nodejs node, node.js +4 more +6 more The llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line... CVE-2022-32215 Fix available EPSS 70.2% 6.5 MediumJuly 14, 2022
• llhttp, nodejs node, node.js +2 more +4 more llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields CVE-2022-32214 Fix available EPSS 81.8% 6.5 MediumJuly 14, 2022
• llhttp, nodejs node, node.js +4 more +6 more llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding CVE-2022-32213 Fix available EPSS 44.8% 6.5 MediumJuly 14, 2022
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event... CVE-2022-30279 7.5 HighMay 12, 2022
• stormshield network security In Stormshield Network Security (SNS) 3.7.6 through 3.7.24, 3.11.1 through 3.11.12, 4.2.1 through... CVE-2022-23989 7.5 HighMarch 15, 2022
• stormshield network security In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the... CVE-2021-31814 6.1 MediumFebruary 10, 2022
• stormshield network security Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. CVE-2021-37613 6.5 MediumFebruary 10, 2022
• stormshield network security Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. CVE-2021-3398 5.8 MediumFebruary 10, 2022
• stormshield network security In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0... CVE-2021-31617 9.8 CriticalJanuary 31, 2022
• stormshield network security Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain... CVE-2021-28962 7.2 HighJanuary 31, 2022
• stormshield network security An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can... CVE-2021-28096 5.3 MediumJanuary 27, 2022
• stormshield network security In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and... CVE-2022-22703 5.5 MediumJanuary 17, 2022
• Show olderLoading…